Cisco Nexus 9000 Series NX-OS Fundamentals Configuration Guide, Release 6.x

Transcription

1 Cisco Nexus 9000 Series NX-OS Fundamentals Configuration Guide, Release 6.x First Published: Last Modified: Americas Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA USA Tel: NETS (6387) Fax:

2 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS" WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental. This product includes cryptographic software written by Eric Young (eay@cryptsoft.com). This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. ( This product includes software written by Tim Hudson (tjh@cryptsoft.com). Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) Cisco Systems, Inc. All rights reserved.

3 CONTENTS Preface Preface xi Audience xi Document Conventions xi Related Documentation for Cisco Nexus 9000 Series Switches xii Documentation Feedback xii Obtaining Documentation and Submitting a Service Request xiii CHAPTER 1 New and Changed Information 1 New and Changed Information 1 CHAPTER 2 Overview 3 Software Image 3 Software Compatibility 3 Spine/Leaf Topology 3 Modular Software Design 4 Serviceability 4 Switched Port Analyzer 4 Ethanalyzer 4 Smart Call Home 5 Online Diagnostics 5 Embedded Event Manager 5 Manageability 5 Simple Network Management Protocol 5 Configuration Verification and Rollback 5 Role-Based Access Control 6 Cisco NX-OS Device Configuration Methods 6 Programmability 6 iii

4 Contents Python API 6 Tcl 6 Cisco NX-API 7 Bash Shell 7 Broadcom Shell 7 Traffic Routing, Forwarding, and Management 7 Ethernet Switching 7 IP Routing 8 IP Services 8 IP Multicast 8 Quality of Service 9 Network Security Features 9 Licensing 10 Supported Standards 10 CHAPTER 3 Using the Cisco NX-OS Setup Utility 15 About the Cisco NX-OS Setup Utility 15 Prerequisites for the Setup Utility 17 Setting Up Your Cisco NX-OS Device 17 Additional References for the Setup Utility 21 Related Documents for the Setup Utility 21 CHAPTER 4 Using PowerOn Auto Provisioning 23 About PowerOn Auto Provisioning 23 Network Requirements for POAP 23 POAP Configuration Script 24 POAP Process 25 Power-Up Phase 26 DHCP Discovery Phase 27 Script Execution Phase 28 Post-Installation Reload Phase 29 Guidelines and Limitations for POAP 29 Setting Up the Network Environment to Use POAP 30 Configuring a Switch Using POAP 30 Verifying the Device Configuration 31 iv

5 Contents CHAPTER 5 Understanding the Command-Line Interface 33 About the CLI Prompt 34 Command Modes 34 EXEC Command Mode 34 Global Configuration Command Mode 35 Interface Configuration Command Mode 35 Subinterface Configuration Command Mode 36 Saving and Restoring a Command Mode 36 Exiting a Configuration Command Mode 37 Command Mode Summary 37 Special Characters 38 Keystroke Shortcuts 39 Abbreviating Commands 42 Completing a Partial Command Name 42 Identifying Your Location in the Command Hierarchy 43 Using the no Form of a Command 43 Configuring CLI Variables 44 About CLI Variables 44 Configuring CLI Session-Only Variables 45 Configuring Persistent CLI Variables 45 Command Aliases 46 About Command Aliases 46 Defining Command Aliases 47 Configuring Command Aliases for a User Session 47 Command Scripts 48 Running a Command Script 48 Echoing Information to the Terminal 48 Delaying Command Action 49 Context-Sensitive Help 50 Understanding Regular Expressions 52 Special Characters 52 Multiple-Character Patterns 52 Anchoring 53 Searching and Filtering show Command Output 53 v

6 Contents Filtering and Searching Keywords 54 diff Utility 55 grep and egrep Utilities 56 less Utility 57 Mini AWK Utility 57 sed Utility 57 sort Utility 57 Searching and Filtering from the --More-- Prompt 58 Using the Command History 59 Recalling a Command 59 Controlling CLI History Recall 60 Configuring the CLI Edit Mode 60 Displaying the Command History 60 Enabling or Disabling the CLI Confirmation Prompts 61 Setting CLI Display Colors 61 Sending Commands to Modules 62 Sending Command Output in 63 BIOS Loader Prompt 64 Examples Using the CLI 64 Using the System-Defined Timestamp Variable 64 Using CLI Session Variables 65 Defining Command Aliases 65 Running a Command Script 66 Sending Command Output in 66 Additional References for the CLI 67 Related Documents for the CLI 67 CHAPTER 6 Configuring Terminal Settings and Sessions 69 About Terminal Settings and Sessions 69 Terminal Session Settings 69 Console Port 70 Virtual Terminals 70 Licensing Requirements for Terminal Settings and Sessions 70 Default Settings for File System Parameters 71 Configuring the Console Port 71 vi

7 Contents Configuring Virtual Terminals 72 Configuring the Inactive Session Timeout 72 Configuring the Session Limit 73 Clearing Terminal Sessions 74 Displaying Terminal and Session Information 75 Additional References for Terminal Settings and Sessions 75 Related Documents for Terminal Settings and Sessions 75 CHAPTER 7 Basic Device Management 77 About Basic Device Management 77 Device Hostname 77 Message-of-the-Day Banner 78 Device Clock 78 Clock Manager 78 Time Zone and Summer Time (Daylight Saving Time) 78 User Sessions 78 Licensing Requirements for Basic Device Management 78 Default Settings for Basic Device Parameters 79 Changing the Device Hostname 79 Configuring the MOTD Banner 80 Configuring the Time Zone 80 Configuring Summer Time (Daylight Saving Time) 81 Manually Setting the Device Clock 82 Setting the Clock Manager 83 Managing Users 84 Displaying Information about the User Sessions 84 Sending a Message to Users 84 Verifying the Device Configuration 84 Additional References for Basic Device Management 85 Related Documents for Basic Device Management 85 CHAPTER 8 Using the Device File Systems, Directories, and Files 87 About the Device File Systems, Directories, and Files 87 File Systems 87 Directories 88 vii

8 Contents Files 88 Licensing Requirements for File Systems, Directories, and Files 89 Default Settings for File System Parameters 89 Configuring the FTP, HTTP, or TFTP Source Interface 89 Working with Directories 90 Identifying the Current Directory 90 Changing the Current Directory 90 Creating a Directory 91 Displaying Directory Contents 91 Deleting a Directory 91 Accessing Directories on the Standby Supervisor Module 92 Working with Files 92 Moving Files 92 Copying Files 93 Deleting Files 94 Displaying File Contents 94 Displaying File Checksums 95 Compressing and Uncompressing Files 95 Displaying the Last Lines in a File 95 Redirecting show Command Output to a File 96 Finding Files 96 Working with Archive Files 97 Creating an Archive File 97 Appending Files to an Archive File 98 Extracting Files from an Archive File 98 Displaying the Filenames in an Archive File 99 Examples of Using the File System 99 Accessing Directories on Standby Supervisor Modules 99 Moving Files 100 Copying Files 100 Deleting a Directory 100 Displaying File Contents 101 Displaying File Checksums 101 Compressing and Uncompressing Files 102 Redirecting show Command Output 102 viii

9 Contents Finding Files 102 Additional References for File Systems 103 Related Documents for File Systems 103 CHAPTER 9 Working with Configuration Files 105 About Configuration Files 105 Types of Configuration Files 105 Licensing Requirements for Configuration Files 106 Managing Configuration Files 106 Saving the Running Configuration to the Startup Configuration 106 Copying a Configuration File to a Remote Server 107 Downloading the Running Configuration From a Remote Server 107 Downloading the Startup Configuration From a Remote Server 108 Copying Configuration Files to an External Flash Memory Device 110 Copying the Running Configuration from an External Flash Memory Device 110 Copying the Startup Configuration From an External Flash Memory Device 111 Copying Configuration Files to an Internal File System 112 Rolling Back to a Previous Configuration 113 Removing the Configuration for a Missing Module 113 Erasing a Configuration 114 Clearing Inactive Configurations 115 Verifying the Device Configuration 116 Examples of Working with Configuration Files 116 Copying Configuration Files 116 Backing Up Configuration Files 116 Rolling Back to a Previous Configuration 117 Additional References for Configuration Files 117 Related Documents for Configuration Files 117 ix

10 Contents x

11 Preface This preface includes the following sections: Audience, page xi Document Conventions, page xi Related Documentation for Cisco Nexus 9000 Series Switches, page xii Documentation Feedback, page xii Obtaining Documentation and Submitting a Service Request, page xiii Audience This publication is for network administrators who install, configure, and maintain Cisco Nexus switches. Document Conventions Command descriptions use the following conventions: Convention Description bold Bold text indicates the commands and keywords that you enter literally as shown. Italic Italic text indicates arguments for which the user supplies the values. [x] Square brackets enclose an optional element (keyword or argument). [x y] Square brackets enclosing keywords or arguments separated by a vertical bar indicate an optional choice. {x y} Braces enclosing keywords or arguments separated by a vertical bar indicate a required choice. xi

12 Related Documentation for Cisco Nexus 9000 Series Switches Preface Convention [x {y z}] variable string Description Nested set of square brackets or braces indicate optional or required choices within optional or required elements. Braces and a vertical bar within square brackets indicate a required choice within an optional element. Indicates a variable for which you supply values, in context where italics cannot be used. A nonquoted set of characters. Do not use quotation marks around the string or the string will include the quotation marks. Examples use the following conventions: Convention screen font boldface screen font italic screen font < > [ ]!, # Description Terminal sessions and information the switch displays are in screen font. Information you must enter is in boldface screen font. Arguments for which you supply values are in italic screen font. Nonprinting characters, such as passwords, are in angle brackets. Default responses to system prompts are in square brackets. An exclamation point (!) or a pound sign (#) at the beginning of a line of code indicates a comment line. Related Documentation for Cisco Nexus 9000 Series Switches The entire Cisco Nexus 9000 Series switch documentation set is available at the following URL: Documentation Feedback To provide technical feedback on this document, or to report an error or omission, please send your comments to nexus9k-docfeedback@cisco.com. We appreciate your feedback. xii

13 Preface Obtaining Documentation and Submitting a Service Request Obtaining Documentation and Submitting a Service Request For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What's New in Cisco Product Documentation at: Subscribe to What's New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation as an RSS feed and delivers content directly to your desktop using a reader application. The RSS feeds are a free service. xiii

14 Obtaining Documentation and Submitting a Service Request Preface xiv

15 CHAPTER 1 New and Changed Information This chapter provides release-specific information for each new and changed feature in the Cisco Nexus 9000 Series NX-OS Fundamentals Guide, Release 6.x. New and Changed Information, page 1 New and Changed Information This table summarizes the new and changed features for the Cisco Nexus 9000 Series NX-OS Fundamentals Configuration Guide, Release 6.x and tells you where they are documented. Table 1: New and Changed Features for Cisco NX-OS Release 6.x Feature Description Changed Where Documented in Release Policy-based routing Introduced this feature. 6.1(2)I3(1) Overview, on page 3 FTP and HTTP Added the ability to configure 6.1(2)I2(2a) Using the Device File Systems, the source interface. Directories, and Files, on page 87 Cisco NX-OS setup utility Added support for Layer 2 switching. 6.1(2)I2(1) Using the Cisco NX-OS Setup Utility, on page 15 CLI Added support for VLAN interfaces. 6.1(2)I2(1) Understanding the Command-Line Interface, on page 33 DCNM Introduced this feature. 6.1(2)I2(1) Overview, on page 3 Ethernet switching Introduced this feature. 6.1(2)I2(1) Overview, on page 3 First-Hop Redundancy Protocols Added support for HSRP and VRRP. 6.1(2)I2(1) Overview, on page 3 1

16 New and Changed Information New and Changed Information Feature Description Changed in Release Where Documented Multicast routing Added support for IGMP snooping. 6.1(2)I2(1) Overview, on page 3 POAP Added support for vpcs. 6.1(2)I2(1) Using PowerOn Auto Provisioning, on page 23 Security Added support for MAC ACLs, VLAN ACLs, and traffic storm control. 6.1(2)I2(1) Overview, on page 3 Spanning Tree Protocol Introduced this feature. 6.1(2)I2(1) Overview, on page 3 2

17 CHAPTER 2 Overview This chapter contains the following sections: Software Image, page 3 Software Compatibility, page 3 Serviceability, page 4 Manageability, page 5 Programmability, page 6 Traffic Routing, Forwarding, and Management, page 7 Quality of Service, page 9 Network Security Features, page 9 Licensing, page 10 Supported Standards, page 10 Software Image The Cisco NX-OS software consists of one NXOS software image (for example, n9000-dk i1.1.bin). This image runs on all Cisco Nexus 9000 Series switches. Software Compatibility The Cisco NX-OS software interoperates with Cisco products that run any variant of the Cisco IOS software. The Cisco NX-OS software also interoperates with any networking operating system that conforms to the IEEE and RFC compliance standards. Spine/Leaf Topology The Cisco Nexus 9000 Series switches support a two-tier spine/leaf topology. 3

18 Modular Software Design Overview This figure shows an example of a spine/leaf topology with four leaf switches (Cisco Nexus 9396 or 93128) connecting into two spine switches (Cisco Nexus 9508) and two 40G Ethernet uplinks from each leaf to each spine. Figure 1: Spine/Leaf Topology Modular Software Design The Cisco NX-OS software supports distributed multithreaded processing on symmetric multiprocessors (SMPs), multi-core CPUs, and distributed data module processors. The Cisco NX-OS software offloads computationally intensive tasks, such as hardware table programming, to dedicated processors distributed across the data modules. The modular processes are created on demand, each in a separate protected memory space. Processes are started and system resources are allocated only when you enable a feature. A real-time preemptive scheduler helps to ensure the timely processing of critical functions. Serviceability Switched Port Analyzer The Cisco NX-OS software has serviceability functions that allow the device to respond to network trends and events. These features help you with network planning and improving response times. The Switched Port Analyzer (SPAN) feature allows you to analyze all traffic between ports (called the SPAN source ports) by nonintrusively directing the SPAN session traffic to a SPAN destination port that has an external analyzer attached to it. For more information about SPAN, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. Ethanalyzer Ethanalyzer is a Cisco NX-OS protocol analyzer tool based on the Wireshark (formerly Ethereal) open source code. Ethanalyzer is a command-line version of Wireshark for capturing and decoding packets. You can use Ethanalyzer to troubleshoot your network and analyze the control-plane traffic. For more information about Ethanalyzer, see the Cisco Nexus 9000 Series NX-OS Troubleshooting Guide. 4

19 Overview Smart Call Home Smart Call Home The Call Home feature continuously monitors hardware and software components to provide -based notification of critical system events. A versatile range of message formats is available for optimal compatibility with pager services, standard , and XML-based automated parsing applications. It offers alert grouping capabilities and customizable destination profiles. You can use this feature, for example, to directly page a network support engineer, send an message to a network operations center (NOC), and employ Cisco AutoNotify services to directly generate a case with the Cisco Technical Assistance Center (TAC). For more information about Smart Call Home, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. Online Diagnostics Cisco generic online diagnostics (GOLD) verify that hardware and internal data paths are operating as designed. Boot-time diagnostics, continuous monitoring, and on-demand and scheduled tests are part of the Cisco GOLD feature set. GOLD allows rapid fault isolation and continuous system monitoring. For information about configuring GOLD, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. Embedded Event Manager Cisco Embedded Event Manager (EEM) is a device and system management feature that helps you to customize behavior based on network events as they happen. For information about configuring EEM, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. Manageability This section describes the manageability features for the Cisco Nexus 9000 Series switches. Simple Network Management Protocol The Cisco NX-OS software is compliant with Simple Network Management Protocol (SNMP) version 1, version 2, and version 3. A large number of MIBs is supported. For more information about SNMP, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. Configuration Verification and Rollback The Cisco NX-OS software allows you to verify the consistency of a configuration and the availability of necessary hardware resources prior to committing the configuration. You can preconfigure a device and apply the verified configuration at a later time. Configurations also include checkpoints that allow you to roll back to a known good configuration as needed. For more information about rollbacks, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. 5

20 Role-Based Access Control Overview Role-Based Access Control With role-based access control (RBAC), you can limit access to device operations by assigning roles to users. You can customize access and restrict it to the users who require it. For more information about RBAC, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide. Cisco NX-OS Device Configuration Methods You can use these methods to configure Cisco NX-OS devices: The CLI from a Secure Shell (SSH) session, a Telnet session, or the console port. SSH provides a secure connection to the device. The CLI configuration guides are organized by feature. For more information, see the Cisco NX-OS configuration guides. For more information about SSH and Telnet, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide. The XML management interface, which is a programmatic method based on the NETCONF protocol that complements the CLI. For more information, see the Cisco NX-OS XML Interface User Guide. The Cisco Data Center Network Management (DCNM) client, which runs on your local PC and uses web services on the Cisco DCNM server. The Cisco DCNM server configures the device over the XML management interface. For more information about the Cisco DCNM client, see the Cisco DCNM Fundamentals Guide. Programmability Python API This section describes the programmability features for the Cisco Nexus 9000 Series switches. Python is an easy-to-learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms. The Python interpreter and the extensive standard library are freely available in source or binary form for all major platforms from the Python website: The Python scripting capability gives programmatic access to the CLI to perform various tasks and Power-On Auto Provisioning (POAP) or Embedded Event Manager (EEM) actions. For more information about the Python API and Python scripting, see the Cisco Nexus 9000 Series NX-OS Programmability Guide. Tcl Tool Command Language (Tcl) is a scripting language. With Tcl, you gain more flexibility in your use of the CLI commands on the device. You can use Tcl to extract certain values in the output of a show command, perform switch configurations, run Cisco NX-OS commands in a loop, or define EEM policies in a script. 6

21 Overview Cisco NX-API Cisco NX-API The Cisco NX-API provides web-based programmatic access to the Cisco Nexus 9000 Series switches. This support is delivered through the NX-API open-source web server. The Cisco NX-API exposes the complete configuration and management capabilities of the command-line interface (CLI) through web-based APIs. You can configure the switch to publish the output of the API calls in either XML or JSON format. For more information about the Cisco NX-API, see the Cisco Nexus 9000 Series NX-OS Programmability Guide. Note NX-API performs authentication through a programmable authentication module (PAM) on the switch. Use cookies to reduce the number of PAM authentications and thus reduce the load on PAM. Bash Shell The Cisco Nexus 9000 Series switches support direct Linux shell access. With Linux shell support, you can access the Linux system on the switch in order to use Linux commands and manage the underlying system. For more information about Bash shell support, see the Cisco Nexus 9000 Series NX-OS Programmability Guide. Broadcom Shell The Cisco Nexus 9000 Series switch front-panel and fabric module line cards contain several Broadcom ASICs. You can use the CLI to access the command-line shell (bcm shell) for these ASICs. The benefit of using this method to access the bcm shell is that you can use Cisco NX-OS command extensions such as pipe include and redirect output to file to manage the output. In addition, the activity is recorded in the system accounting log for audit purposes, unlike commands entered directly from the bcm shell, which are not recorded in the accounting log. For more information about Broadcom shell support, see the Cisco Nexus 9000 Series NX-OS Programmability Guide. Caution Use Broadcom shell commands with caution and only under the direct supervision or request of Cisco Support personnel. Traffic Routing, Forwarding, and Management Ethernet Switching This section describes the traffic routing, forwarding, and management features supported by the Cisco NX-OS software. The Cisco NX-OS software supports high-density, high-performance Ethernet systems and provides the following Ethernet switching features: IEEE 802.1D-2004 Rapid and Multiple Spanning Tree Protocols (802.1w and 802.1s) 7

22 IP Routing Overview IEEE 802.1Q VLANs and trunks IEEE 802.3ad link aggregation Unidirectional Link Detection (UDLD) in aggressive and standard modes For more information, see the Cisco Nexus 9000 Series NX-OS Interfaces Configuration Guide and the Cisco Nexus 9000 Series NX-OS Layer 2 Switching Configuration Guide. IP Routing The Cisco NX-OS software supports IP version 4 (IPv4) and IP version 6 (IPv6) and the following routing protocols: Open Shortest Path First (OSPF) Protocol Versions 2 (IPv4) and 3 (IPv6) Intermediate System-to-Intermediate System (IS-IS) Protocol (IPv4 and IPv6) Border Gateway Protocol (BGP) (IPv4 and IPv6) Enhanced Interior Gateway Routing Protocol (EIGRP) (IPv4 only) Routing Information Protocol Version 2 (RIPv2) (IPv4 only) The Cisco NX-OS software implementations of these protocols are fully compliant with the latest standards and include 4-byte autonomous system numbers (ASNs) and incremental shortest path first (SPF). All unicast protocols support Non-Stop Forwarding Graceful Restart (NSF-GR). All protocols support all interface types, including Ethernet interfaces, VLAN interfaces, subinterfaces, port channels, and loopback interfaces. For more information, see the Cisco Nexus 9000 Series NX-OS Unicast Routing Configuration Guide. IP Services The following IP services are available in the Cisco NX-OS software: Virtual routing and forwarding (VRF) Dynamic Host Configuration Protocol (DHCP) helper Hot Standby Router Protocol (HSRP) Enhanced object tracking Policy-based routing (PBR) Unicast graceful restart for all protocols in IPv4 unicast graceful restart for OPSFv3 in IPv6 For more information, see the Cisco Nexus 9000 Series NX-OS Unicast Routing Configuration Guide. IP Multicast The Cisco NX-OS software includes the following multicast protocols and functions: Protocol Independent Multicast (PIM) Version 2 (PIMv2) 8

23 Overview Quality of Service PIM sparse mode (Any-Source Multicast [ASM] for IPv4) Anycast rendezvous point (Anycast-RP) Multicast NSF for IPv4 RP-Discovery using bootstrap router (BSR) (Auto-RP and static) Internet Group Management Protocol (IGMP) Versions 1, 2, and 3 router role IGMPv2 host mode IGMP snooping Multicast Source Discovery Protocol (MSDP) (for IPv4) Note The Cisco NX-OS software does not support PIM dense mode. For more information, see the Cisco Nexus 9000 Series NX-OS Multicast Routing Configuration Guide. Quality of Service The Cisco NX-OS software supports quality of service (QoS) functions for classification, marking, queuing, policing, and scheduling. Modular QoS CLI (MQC) supports all QoS features. You can use MQC to provide uniform configurations across various Cisco platforms. For more information, see the Cisco Nexus 9000 Series NX-OS Quality of Service Configuration Guide. Network Security Features The Cisco NX-OS software includes the following security features: Control Plane Policing (CoPP) Message-digest algorithm 5 (MD5) routing protocol authentication Authentication, authorization, and accounting (AAA) RADIUS and TACACS+ SSH Protocol Version 2 SNMPv3 Policies based on MAC and IPv4 addresses supported by named ACLs (port-based ACLs [PACLs], VLAN-based ACLs [VACLs], and router-based ACLs [RACLs]) Traffic storm control (unicast, multicast, and broadcast) For more information, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide. 9

24 Licensing Overview Licensing The Cisco NX-OS software licensing feature allows you to access premium features on the device after you install the appropriate license for that feature. Any feature not included in a license package is bundled with the Cisco NX-OS software and is provided to you at no extra charge. You must purchase and install a license for each device. For detailed information about Cisco NX-OS software licensing, see the Cisco NX-OS Licensing Guide. For information about troubleshooting licensing issues, see the Cisco Nexus 9000 Series NX-OS Troubleshooting Guide. Supported Standards This table lists the IEEE compliance standards. Table 2: IEEE Compliance Standards Standard 802.1D 802.1p 802.1Q 802.1s 802.1w 802.3ab 802.3ad 802.3ae Description MAC Bridges Class of Service Tagging for Ethernet frames VLAN Tagging Multiple Spanning Tree Protocol Rapid Spanning Tree Protocol 1000Base-T (10/100/1000 Ethernet over copper) Link aggregation with LACP 10-Gigabit Ethernet This table lists the RFC compliance standards. For information on each RFC, see Table 3: RFC Compliance Standards Standard BGP RFC 1997 RFC 2385 Description BGP Communities Attribute Protection of BGP Sessions via the TCP MD5 Signature Option 10

25 Overview Supported Standards Standard RFC 2439 RFC 2519 RFC 2858 RFC 3065 RFC 3392 RFC 4271 RFC 4273 RFC 4456 RFC 4486 RFC 4724 RFC 4893 ietf-draft ietf-draft ietf-draft Description BGP Route flap damping A Framework for Inter-Domain Route Aggregation Multiprotocol Extensions for BGP-4 Autonomous System Confederations for BGP Capabilities Advertisement with BGP-4 BGP version 4 BGP4 MIB - Definitions of Managed Objects for BGP-4 BGP Route reflection Subcodes for BGP cease notification message Graceful Restart Mechanism for BGP BGP Support for Four-octet AS Number Space Bestpath transition avoidance (draft-ietf-idr-avoid-transition-05.txt) Peer table objects (draft-ietf-idr-bgp4-mib-15.txt) Dynamic Capability (draft-ietf-idr-dynamic-cap-03.txt) IP Multicast RFC 2236 RFC 3376 Internet Group Management Protocol, Version 2 Internet Group Management Protocol, Version 3 11

26 Supported Standards Overview Standard RFC 3446 RFC 3569 RFC 3618 RFC 4601 RFC 4607 RFC 4610 RFC 6187 ietf-draft Description Anycast Rendezvous Point (RP) mechanism using Protocol Independent Multicast (PIM) and Multicast Source Discovery Protocol (MSDP) An Overview of Source-Specific Multicast (SSM) Multicast Source Discovery Protocol (MSDP) ASM - Sparse Mode (PIM-SM): Protocol Specification (Revised) Source-Specific Multicast for IP Anycast-RP Using Protocol Independent Multicast (PIM) X.509v3 Certificates for Secure Shell Authentication Mtrace server functionality, to process mtrace-requests, draft-ietf-idmr-traceroute-ipm-07.txt IP Services RFC 768 RFC 783 RFC 791 RFC 792 RFC 793 RFC 826 RFC 854 RFC 959 RFC 1027 RFC 1305 UDP TFTP IP ICMP TCP ARP Telnet FTP Proxy ARP NTP v3 12

27 Overview Supported Standards Standard RFC 1519 RFC 1542 RFC 1591 RFC 1812 RFC 2131 RFC 2338 Description CIDR BootP relay DNS client IPv4 routers DHCP Helper VRRP IS-IS RFC 1142 (OSI 10589) RFC 1195 RFC 2763 RFC 2966 RFC 2973 RFC 3277 RFC 3373 RFC 3567 RFC 3847 ietf-draft OSI Intermediate system to intermediate system intra-domain routing exchange protocol Use of OSI IS-IS for routing in TCP/IP and dual environment. Dynamic Hostname Exchange Mechanism for IS-IS Domain-wide Prefix Distribution with Two-Level IS-IS IS-IS Mesh Groups IS-IS Transient Blackhole Avoidance Three-Way Handshake for IS-IS Point-to-Point Adjacencies IS-IS Cryptographic Authentication Restart Signaling for IS-IS Internet Draft Point-to-point operation over LAN in link-state routing protocols (draft-ietf-isis-igp-p2p-over-lan-06.txt) OSPF RFC 2328 RFC 2370 OSPF Version 2 OSPF Opaque LSA Option 13

28 Supported Standards Overview Standard RFC 2740 RFC 3101 RFC 3137 RFC 3509 RFC 3623 RFC 4750 Description OSPF for IPv6 (OSPF version 3) OSPF Not-So-Stubby-Area (NSSA) Option OSPF Stub Router Advertisement Alternative Implementations of OSPF Area Border Routers Graceful OSPF Restart OSPF Version 2 MIB RIP RFC 1724 RFC 2082 RFC 2453 RIPv2 MIB extension RIPv2 MD5 Authentication RIP Version 2 14

29 CHAPTER 3 Using the Cisco NX-OS Setup Utility This chapter contains the following sections: About the Cisco NX-OS Setup Utility, page 15 Prerequisites for the Setup Utility, page 17 Setting Up Your Cisco NX-OS Device, page 17 Additional References for the Setup Utility, page 21 About the Cisco NX-OS Setup Utility The Cisco NX-OS setup utility is an interactive command-line interface (CLI) mode that guides you through a basic (also called a startup) configuration of the system. The setup utility allows you to configure only enough connectivity for system management. The setup utility allows you to build an initial configuration file using the System Configuration Dialog. The setup starts automatically when a device has no configuration file in NVRAM. The dialog guides you through initial configuration. After the file is created, you can use the CLI to perform additional configuration. You can press Ctrl-C at any prompt to skip the remaining configuration options and proceed with what you have configured up to that point, except for the administrator password. If you want to skip answers to any questions, press Enter. If a default answer is not available (for example, the device hostname), the device uses what was previously configured and skips to the next question. 15

30 About the Cisco NX-OS Setup Utility Using the Cisco NX-OS Setup Utility This figure shows how to enter and exit the setup script. Figure 2: Setup Script Flow You use the setup utility mainly for configuring the system initially, when no configuration is present. However, you can use the setup utility at any time for basic device configuration. The setup utility keeps the configured values when you skip steps in the script. For example, if you have already configured the mgmt0 interface, the setup utility does not change that configuration if you skip that step. However, if there is a default value for the step, the setup utility changes to the configuration using that default, not the configured value. Be sure to carefully check the configuration changes before you save the configuration. Note Be sure to configure the IPv4 route, the default network IPv4 address, and the default gateway IPv4 address to enable SNMP access. If you enable IPv4 routing, the device uses the IPv4 route and the default network IPv4 address. If IPv4 routing is disabled, the device uses the default gateway IPv4 address. 16

31 Using the Cisco NX-OS Setup Utility Prerequisites for the Setup Utility Note The setup script only supports IPv4. Prerequisites for the Setup Utility The setup utility has the following prerequisites: Have a password strategy for your network environment. Connect the console port on the supervisor module to the network. If you have dual supervisor modules, connect the console ports on both supervisor modules to the network. Connect the Ethernet management port on the supervisor module to the network. If you have dual supervisor modules, connect the Ethernet management ports on both supervisor modules to the network. Setting Up Your Cisco NX-OS Device To configure basic management of the Cisco NX-OS device using the setup utility, follow these steps: Procedure Step 1 Step 2 Power on the device. Enable or disable password-strength checking. A strong password has the following characteristics: At least eight characters long Does not contain many consecutive characters (such as "abcd") Does not contain many repeating characters (such as "aaabbb") Does not contain dictionary words Does not contain proper names Contains both uppercase and lowercase characters Contains numbers ---- System Admin Account Setup ---- Do you want to enforce secure password standard (yes/no) [y]: y Step 3 Enter the new password for the administrator. Note If a password is trivial (such as a short, easy-to-decipher password), your password configuration is rejected. Passwords are case sensitive. Be sure to configure a strong password that has at least eight characters, both uppercase and lowercase letters, and numbers. 17

32 Setting Up Your Cisco NX-OS Device Using the Cisco NX-OS Setup Utility Enter the password for "admin": <password> Confirm the password for "admin": <password> ---- Basic System Configuration Dialog ---- This setup utility will guide you through the basic configuration of the system. Setup configures only enough connectivity for management of the system. Please register Cisco Nexus 9000 Family devices promptly with your supplier. Failure to register may affect response times for initial service calls. Nexus devices must be registered to receive entitled support services. Step 4 Press Enter at anytime to skip a dialog. Use ctrl-c at anytime to skip the remaining dialogs. Enter the setup mode by entering yes. Would you like to enter the basic configuration dialog (yes/no): yes Step 5 Create additional accounts by entering yes (no is the default). Create another login account (yes/no) [n]:yes a) Enter the user login ID. Enter the User login Id : user_login Caution Usernames must begin with an alphanumeric character and can contain only these special characters: ( + =. _ \ -). The # and! symbols are not supported. If the username contains characters that are not allowed, the specified user is unable to log in. b) Enter the user password. Enter the password for "user1": user_password Confirm the password for "user1": user_password c) Enter the default user role. Enter the user role (network-operator network-admin) [network-operator]: default_user_role For information on the default user roles, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide. Step 6 Configure an SNMP community string by entering yes. 18

33 Using the Cisco NX-OS Setup Utility Setting Up Your Cisco NX-OS Device Configure read-only SNMP community string (yes/no) [n]: yes SNMP community string : snmp_community_string For information on SNMP, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. Step 7 Enter a name for the device (the default name is switch). Enter the switch name: switch_name Step 8 Configure out-of-band management by entering yes. You can then enter the mgmt0 IPv4 address and subnet mask. Note You can only configure IPv4 address in the setup utility. For information on configuring IPv6, see the Cisco Nexus 9000 Series NX-OS Unicast Routing Configuration Guide. Continue with Out-of-band (mgmt0) management configuration? [yes/no]: yes Mgmt0 IPv4 address: mgmt0_ip_address Mgmt0 IPv4 netmask: mgmt0_subnet_mask Step 9 Configure the IPv4 default gateway (recommended) by entering yes. You can then enter its IP address. Configure the default-gateway: (yes/no) [y]: yes IPv4 address of the default-gateway: default_gateway Step 10 Configure advanced IP options such as the static routes, default network, DNS, and domain name by entering yes. Configure Advanced IP options (yes/no)? [n]: yes Step 11 Configure a static route (recommended) by entering yes. You can then enter its destination prefix, destination prefix mask, and next hop IP address. Configure static route: (yes/no) [y]: yes Destination prefix: dest_prefix Destination prefix mask: dest_mask Next hop ip address: next_hop_address Step 12 Configure the default network (recommended) by entering yes. You can then enter its IPv4 address. Note The default network IPv4 address is the same as the destination prefix in the static route configuration. Configure the default network: (yes/no) [y]: yes 19

34 Setting Up Your Cisco NX-OS Device Using the Cisco NX-OS Setup Utility Default network IP address [dest_prefix]: dest_prefix Step 13 Configure the DNS IPv4 address by entering yes. You can then enter the address. Configure the DNS IP address? (yes/no) [y]: yes DNS IP address: ipv4_address Step 14 Configure the default domain name by entering yes. You can then enter the name. Configure the DNS IP address? (yes/no) [y]: yes DNS IP address: ipv4_address Step 15 Enable the Telnet service by entering yes. Enable the telnet service? (yes/no) [y]: yes Step 16 Enable the SSH service by entering yes. You can then enter the key type and number of key bits. For more information, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide. Enable the ssh service? (yes/no) [y]: yes Type of ssh key you would like to generate (dsa/rsa) : key_type Number of key bits < > : number_of_bits Step 17 Configure the NTP server by entering yes. You can then enter its IP address. For more information, see the Cisco Nexus 9000 Series NX-OS System Management Configuration Guide. Configure NTP server? (yes/no) [n]: yes NTP server IP address: ntp_server_ip_address Step 18 Specify a default interface layer (L2 or L3). Configure default interface layer (L3/L2) [L3]: interface_layer Step 19 Enter the default switchport interface state (shutdown or no shutdown). A shutdown interface is in an administratively down state. For more information, see the Cisco Nexus 9000 Series NX-OS Interfaces Configuration Guide. Configure default switchport interface state (shut/noshut) [shut]: default_state Step 20 Enter the best practices profile for control plane policing (CoPP). For more information, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide. 20

35 Using the Cisco NX-OS Setup Utility Additional References for the Setup Utility Configure best practices CoPP profile (strict/moderate/lenient/none) [strict]: policy Step 21 The system now summarizes the complete configuration and asks if you want to edit it. Continue to the next step by entering no. If you enter yes, the setup utility returns to the beginning of the setup and repeats each step. Would you like to edit the configuration? (yes/no) [y]: yes Step 22 Use and save this configuration by entering yes. If you do not save the configuration at this point, none of your changes are part of the configuration the next time the device reboots. Enter yes to save the new configuration. This step ensures that the boot variables for the nx-os image are also automatically configured. Use this configuration and save it? (yes/no) [y]: yes Caution If you do not save the configuration at this point, none of your changes are part of the configuration the next time that the device reboots. Enter yes to save the new configuration to ensure that the boot variables for the nx-os image are also automatically configured. Additional References for the Setup Utility This section includes additional information related to using the setup utility. Related Documents for the Setup Utility Related Topic Licensing SSH and Telnet User roles IPv4 and IPv6 SNMP and NTP Document Title Cisco NX-OS Licensing Guide Cisco Nexus 9000 Series NX-OS Security Configuration Guide Cisco Nexus 9000 Series NX-OS Security Configuration Guide Cisco Nexus 9000 Series NX-OS Unicast Routing Configuration Guide Cisco Nexus 9000 Series NX-OS System Management Configuration Guide 21

36 Related Documents for the Setup Utility Using the Cisco NX-OS Setup Utility 22

37 CHAPTER 4 Using PowerOn Auto Provisioning This chapter contains the following sections: About PowerOn Auto Provisioning, page 23 Guidelines and Limitations for POAP, page 29 Setting Up the Network Environment to Use POAP, page 30 Configuring a Switch Using POAP, page 30 Verifying the Device Configuration, page 31 About PowerOn Auto Provisioning PowerOn Auto Provisioning (POAP) automates the process of upgrading software images and installing configuration files on devices that are being deployed in the network for the first time. When a device with the POAP feature boots and does not find the startup configuration, the device enters POAP mode, locates a DHCP server, and bootstraps itself with its interface IP address, gateway, and DNS server IP addresses. The device also obtains the IP address of a TFTP server or the URL of an HTTP server and downloads a configuration script that enables the switch to download and install the appropriate software image and configuration file. Note The DHCP information is used only during the POAP process. Network Requirements for POAP POAP requires the following network infrastructure: A DHCP server to bootstrap the interface IP address, gateway address, and Domain Name System (DNS) server. A TFTP server that contains the configuration script used to automate the software image installation and configuration process. 23

38 POAP Configuration Script Using PowerOn Auto Provisioning One or more servers that contains the desired software images and configuration files. Figure 3: POAP Network Infrastructure POAP Configuration Script The reference script supplied by Cisco supports the following functionality: Retrieves the switch-specific identifier, for example, the serial number. Downloads the nx-os software image if the files do not already exist on the switch. The nx-os image is installed on the switch and is used at the next reboot. Schedules the downloaded configuration to be applied at the next switch reboot. Stores the configuration as the startup configuration. Cisco has sample configuration scripts that were developed using the Python programming language and Tool Command Language (Tcl). You can customize one of these scripts to meet the requirements of your network environment. You can access the Python script to perform POAP on the Cisco Nexus 9000 Series switch at this link: The Python programming language uses two APIs that can execute CLI commands. These APIs are described in the following table. The arguments for these APIs are strings of the CLI commands. 24

39 Using PowerOn Auto Provisioning POAP Process API cli() clid() Description Returns the raw output of CLI commands, including the control/special characters. For CLI commands that support XML, this API puts the command output in a Python dictionary. This API can be useful to help search the output of show commands. POAP Process The POAP process has the following phases: 1 Power up 2 DHCP discovery 3 Script execution 4 Post-installation reload 25

40 POAP Process Using PowerOn Auto Provisioning Within these phases, other process and decision points occur. The following illustration shows a flow diagram of the POAP process. Figure 4: POAP Process Power-Up Phase When you powerup the device for the first time, it loads the software image that is installed at manufacturing and tries to find a configuration file from which to boot. When a configuration file is not found, POAP mode starts. During startup, a prompt appears asking if you want to abort POAP and continue with a normal setup. You can choose to exit or continue with POAP. Note No user intervention is required for POAP to continue. The prompt that asks if you want to abort POAP remains available until the POAP process is complete. 26

41 Using PowerOn Auto Provisioning POAP Process If you exit POAP mode, you enter the normal interactive setup script. If you continue in POAP mode, all the front-panel interfaces are set up in the default configuration. DHCP Discovery Phase The switch sends out DHCP discover messages on the front-panel interfaces or the MGMT interface that solicit DHCP offers from the DHCP server or servers. (See the following figure.) The DHCP client on the Cisco Nexus switch uses the switch serial number in the client-identifier option to identify itself to the DHCP server. The DHCP server can use this identifier to send information, such as the IP address and script filename, back to the DHCP client. POAP requires a minimum DHCP lease period of 3600 seconds (1 hour). POAP checks the DHCP lease period. If the DHCP lease period is set to less than 3600 seconds (1 hour), POAP does not complete the DHCP negotiation. The DHCP discover message also solicits the following options from the DHCP server: TFTP server name or TFTP server address The DHCP server relays the TFTP server name or TFTP server address to the DHCP client. The DHCP client uses this information to contact the TFTP server to obtain the script file. Bootfile name The DHCP server relays the bootfile name to the DHCP client. The bootfile name includes the complete path to the bootfile on the TFTP server. The DHCP client uses this information to download the script file. When multiple DHCP offers that meet the requirement are received, an offer is randomly chosen. The device completes the DHCP negotiation (request and acknowledgment) with the selected DHCP server, and the DHCP server assigns an IP address to the switch. If a failure occurs in any of the subsequent steps in the POAP process, the IP address is released back to the DHCP server. 27

42 POAP Process Using PowerOn Auto Provisioning If no DHCP offers meet the requirements, the switch does not complete the DHCP negotiation (request and acknowledgment) and an IP address is not assigned. Figure 5: DHCP Discovery Process Script Execution Phase After the device bootstraps itself using the information in the DHCP acknowledgement, the script file is downloaded from the TFTP server. 28

43 Using PowerOn Auto Provisioning Guidelines and Limitations for POAP The switch runs the configuration script, which downloads and installs the software image and downloads a switch-specific configuration file. However, the configuration file is not applied to the switch at this point, because the software image that currently runs on the switch might not support all of the commands in the configuration file. After the switch reboots, it begins running the new software image, if an image was installed. At that point, the configuration is applied to the switch. Note If the switch loses connectivity, the script stops, and the switch reloads its original software images and bootup variables. Post-Installation Reload Phase The switch restarts and applies (replays) the configuration on the upgraded software image. Afterward, the switch copies the running configuration to the startup configuration. Guidelines and Limitations for POAP POAP configuration guidelines and limitations are as follows: The switch software image must support POAP for this feature to function. POAP does not support provisioning of the switch after it has been configured and is operational. Only auto-provisioning of a switch with no startup configuration is supported. If you use POAP to bootstrap a Cisco Nexus device that is a part of a virtual port channel (vpc) pair using static port channels on the vpc links, the Cisco Nexus device activates all of its links when POAP starts up. The dually connected device at the end of the vpc links might start sending some or all of its traffic to the port-channel member links that are connected to the Cisco Nexus device, which causes traffic to get lost. To work around this issue, you can configure Link Aggregation Control Protocol (LACP) on the vpc links so that the links do not incorrectly start forwarding traffic to the Cisco Nexus device that is being bootstrapped using POAP. If you use POAP to bootstrap a Cisco Nexus device that is connected downstream to a Cisco Nexus 9000 Series switch through a LACP port channel, the Cisco Nexus 9000 Series switch defaults to suspend its member port if it cannot bundle it as a part of a port channel. To work around this issue, configure the Cisco Nexus 9000 Series switch to not suspend its member ports by using the no lacp suspend-individual command from interface configuration mode. Important POAP updates are logged in the syslog and are available from the serial console. Critical POAP errors are logged to the bootflash. The filename format is date-time_poap_pid_[init,1,2].log, where date-time is in the YYYYMMDD_hhmmss format and PID is the process ID. Script logs are saved in the bootflash directory. The filename format is date-time_poap_pid_script.log, where date-time is in the YYYYMMDD_hhmmss format and PID is the process ID. 29

44 Setting Up the Network Environment to Use POAP Using PowerOn Auto Provisioning You can configure the format of the script log file. Script file log formats are specified in the script. The template of the script log file has a default format; however, you can choose a different format for the script execution log file. The POAP feature does not require a license and is enabled by default. However for the POAP feature to function, appropriate licenses must be installed on the devices in the network before the deployment of the network. Setting Up the Network Environment to Use POAP Procedure Step 1 Step 2 Step 3 Step 4 Modify the basic configuration script provided by Cisco or create your own script. Deploy a DHCP server and configure it with the interface, gateway, and TFTP server IP addresses and a bootfile with the path and name of the configuration script file. (This information is provided to the switch when it first boots.) Deploy a TFTP server to host the configuration script. Deploy one or more servers to host the software images and configuration files. Configuring a Switch Using POAP Before You Begin Make sure that the network environment is set up to use POAP. Procedure Step 1 Step 2 Step 3 Install the switch in the network. Power on the switch. If no configuration file is found, the switch boots in POAP mode and displays a prompt that asks if you want to abort POAP and continue with a normal setup. No entry is required to continue to boot in POAP mode. (Optional) If you want to exit POAP mode and enter the normal interactive setup script, enter y (yes). The switch boots, and the POAP process begins. What to Do Next Verify the configuration. 30

45 Using PowerOn Auto Provisioning Verifying the Device Configuration Verifying the Device Configuration To verify the configuration after bootstrapping the device using POAP, use one of the following commands: Command show running-config show startup-config Displays the running configuration. Displays the startup configuration. 31

46 Verifying the Device Configuration Using PowerOn Auto Provisioning 32

47 CHAPTER 5 Understanding the Command-Line Interface This chapter contains the following sections: About the CLI Prompt, page 34 Command Modes, page 34 Special Characters, page 38 Keystroke Shortcuts, page 39 Abbreviating Commands, page 42 Completing a Partial Command Name, page 42 Identifying Your Location in the Command Hierarchy, page 43 Using the no Form of a Command, page 43 Configuring CLI Variables, page 44 Command Aliases, page 46 Command Scripts, page 48 Context-Sensitive Help, page 50 Understanding Regular Expressions, page 52 Searching and Filtering show Command Output, page 53 Searching and Filtering from the --More-- Prompt, page 58 Using the Command History, page 59 Enabling or Disabling the CLI Confirmation Prompts, page 61 Setting CLI Display Colors, page 61 Sending Commands to Modules, page 62 Sending Command Output in , page 63 BIOS Loader Prompt, page 64 Examples Using the CLI, page 64 33

48 About the CLI Prompt Understanding the Command-Line Interface Additional References for the CLI, page 67 About the CLI Prompt Once you have successfully accessed the device, the CLI prompt displays in the terminal window of your console port or remote workstation as shown in the following example: User Access Verification login: admin Password:<password> Cisco Nexus Operating System (NX-OS) Software TAC support: Copyright (c) , Cisco Systems, Inc. All rights reserved. The copyrights to certain works contained in this software are owned by other third parties and used and distributed under license. Certain components of this software are licensed under the GNU General Public License (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each such license is available at and switch# You can change the default device hostname. From the CLI prompt, you can do the following: Use CLI commands for configuring features Access the command history Use command parsing functions Note In normal operation, usernames are case sensitive. However, when you are connected to the device through its console port, you can enter a login username in all uppercase letters regardless of how the username was defined. As long as you provide the correct password, the device logs you in. Command Modes EXEC Command Mode This section describes command modes in the Cisco NX-OS CLI. When you first log in, the Cisco NX-OS software places you in EXEC mode. The commands available in EXEC mode include the show commands that display the device status and configuration information, the clear commands, and other commands that perform actions that you do not save in the device configuration. 34

49 Understanding the Command-Line Interface Global Configuration Command Mode Global Configuration Command Mode Global configuration mode provides access to the broadest range of commands. The term indicates characteristics or features that affect the device as a whole. You can enter commands in global configuration mode to configure your device globally or to enter more specific configuration modes to configure specific elements such as interfaces or protocols. Procedure Step 1 configure terminal switch# configure terminal switch(config)# Enters global configuration mode. Note The CLI prompt changes to indicate that you are in global configuration mode. Interface Configuration Command Mode One example of a specific configuration mode that you enter from global configuration mode is interface configuration mode. To configure interfaces on your device, you must specify the interface and enter interface configuration mode. You must enable many features on a per-interface basis. Interface configuration commands modify the operation of the interfaces on the device, such as Ethernet interfaces or management interfaces (mgmt 0). For more information about configuring interfaces, see the Cisco Nexus 9000 Series NX-OS Interfaces Configuration Guide. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 switch# configure terminal switch(config)# interface type number switch(config)# interface ethernet 2/2 switch(config-if)# Specifies the interface that you want to configure. The CLI places you into interface configuration mode for the specified interface. Note The CLI prompt changes to indicate that you are in interface configuration mode. 35

50 Subinterface Configuration Command Mode Understanding the Command-Line Interface Subinterface Configuration Command Mode From global configuration mode, you can access a configuration submode for configuring VLAN interfaces called subinterfaces. In subinterface configuration mode, you can configure multiple virtual interfaces on a single physical interface. Subinterfaces appear to a protocol as distinct physical interfaces. Subinterfaces also allow multiple encapsulations for a protocol on a single interface. For example, you can configure IEEE 802.1Q encapsulation to associate a subinterface with a VLAN. For more information about configuring subinterfaces, see the Cisco Nexus 9000 Series NX-OS Interfaces Configuration Guide. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 switch# configure terminal switch(config)# interface type number.subint switch(config)# interface ethernet 2/2.1 switch(config-subif)# Specifies the VLAN interface to be configured. The CLI places you into a subinterface configuration mode for the specified VLAN interface. Note The CLI prompt changes to indicate that you are in subinterface configuration mode. Saving and Restoring a Command Mode The Cisco NX-OS software allows you to save the current command mode, configure a feature, and then restore the previous command mode. The push command saves the command mode, and the pop command restores the command mode. The following example shows how to save and restore a command mode: switch# configure terminal switch(config)# event manager applet test switch(config-applet)# push switch(config-applet)# configure terminal switch(config)# username testuser password newtest switch(config)# pop switch(config-applet)# 36

51 Understanding the Command-Line Interface Exiting a Configuration Command Mode Exiting a Configuration Command Mode Procedure Step 1 Step 2 Step 3 exit switch(config-if)# exit switch(config)# end switch(config-if)# end switch# Ctrl-Z switch(config-if)# ^Z switch# Exits from the current configuration command mode and returns to the previous configuration command mode. Exits from the current configuration command mode and returns to EXEC mode. (Optional) Exits the current configuration command mode and returns to EXEC mode. Caution If you press Ctrl-Z at the end of a command line in which a valid command has been typed, the CLI adds the command to the running configuration file. In most cases, you should exit a configuration mode using the exit or end command. Command Mode Summary This table summarizes information about the main command modes. 37

52 Special Characters Understanding the Command-Line Interface Table 4: Command Mode Summary Mode Access Method Prompt Exit Method EXEC From the login prompt, enter your username and password. switch# To exit to the login prompt, use the exit command. Global configuration From EXEC mode, use the configure terminal command. switch(config)# To exit to EXEC mode, use the end or exit command or press Ctrl-Z. Interface configuration From global configuration mode, specify an interface with an interface command. switch(config-if)# To exit to global configuration mode, use the exit command. To exit to EXEC mode, use the exit command or press Ctrl-Z. Subinterface configuration From global configuration mode, specify a subinterface with an interface command. switch(config-subif)# To exit to global configuration mode, use the exit command. To exit to EXEC mode, use the end command or press Ctrl-Z. VRF configuration From global configuration mode, use the vrf command and specify a routing protocol. switch(config-vrf)# To exit to global configuration mode, use the exit command. To exit to EXEC mode, use the end command or press Ctrl-Z. EXEC for a nondefault VRF From EXEC mode, use the routing-context vrf command and specify a VRF. switch-red# To exit to the default VRF, use the routing-context vrf default command. Special Characters This table lists the characters that have special meaning in Cisco NX-OS text strings and should be used only in regular expressions or other special contexts. 38

53 Understanding the Command-Line Interface Keystroke Shortcuts Table 5: Special Characters Character % #... < > [ ] { } Description Percent Pound, hash, or number Ellipsis Vertical bar Less than or greater than Brackets Braces Keystroke Shortcuts This table lists command key combinations that can be used in both EXEC and configuration modes. Table 6: Keystroke Shortcuts Keystrokes Ctrl-A Ctrl-B Ctrl-C Ctrl-D Ctrl-E Ctrl-F Ctrl-G Description Moves the cursor to the beginning of the line. Moves the cursor one character to the left. When you enter a command that extends beyond a single line, you can press the Left Arrow or Ctrl-B keys repeatedly to scroll back toward the system prompt and verify the beginning of the command entry, or you can press the Ctrl-A key combination. Cancels the command and returns to the command prompt. Deletes the character at the cursor. Moves the cursor to the end of the line. Moves the cursor one character to the right. Exits to the previous command mode without removing the command string. 39

54 Keystroke Shortcuts Understanding the Command-Line Interface Keystrokes Ctrl-K Ctrl-L Ctrl-N Ctrl-O Ctrl-P Ctrl-R Ctrl-T Ctrl-U Ctrl-V Ctrl-W Ctrl-X, H Ctrl-Y Ctrl-Z Up arrow key Down arrow key Description Deletes all characters from the cursor to the end of the command line. Redisplays the current command line. Displays the next command in the command history. Clears the terminal screen. Displays the previous command in the command history. Redisplays the current command line. Transposes the character under the cursor with the character located to the right of the cursor. The cursor is then moved to the right one character. Deletes all characters from the cursor to the beginning of the command line. Removes any special meaning for the following keystroke. For example, press Ctrl-V before entering a question mark (?) in a regular expression. Deletes the word to the left of the cursor. Lists the history of commands you have entered. When using this key combination, press and release the Ctrl and X keys together before pressing H. Recalls the most recent entry in the buffer (press keys simultaneously). Ends a configuration session, and returns you to EXEC mode. When used at the end of a command line in which a valid command has been typed, the resulting configuration is first added to the running configuration file. Displays the previous command in the command history. Displays the next command in the command history. 40

55 Understanding the Command-Line Interface Keystroke Shortcuts Keystrokes Right arrow key Left arrow key? Tab Description Moves your cursor through the command string, either forward or backward, allowing you to edit the current command. Displays a list of available commands. Completes the word for you after you enter the first characters of the word and then press the Tab key. All options that match are presented. Use tabs to complete the following items: Command names Scheme names in the file system Server names in the file system Filenames in the file system switch(config)# xm<tab> switch(config)# xml<tab> switch(config)# xml server switch(config)# c<tab> callhome class-map clock cdp cli control-plane switch(config)# cl<tab> class-map cli clock switch(config)# cla<tab> switch(config)# class-map switch# cd bootflash:<tab> bootflash:/// bootflash://sup-1/ bootflash://sup-active/ bootflash://sup-local/ bootflash://module-27/ bootflash://module-28/ switch# cd bootflash://mo<tab> bootflash://module-27/ bootflash://module-28/ switch# cd bootflash://module-2 Note You cannot access remote machines using the cd command. If you are on slot 27 and enter the cd bootflash://module-28 command, the following message appears: "Changing directory to a non-local server is not allowed." 41

56 Abbreviating Commands Understanding the Command-Line Interface Abbreviating Commands You can abbreviate commands and keywords by entering the first few characters of a command. The abbreviation must include sufficient characters to make it unique from other commands or keywords. If you are having trouble entering a command, check the system prompt and enter the question mark (?) for a list of available commands. You might be in the wrong command mode or using incorrect syntax. This table lists examples of command abbreviations. Table 7: Examples of Command Abbreviations Command configure terminal copy running-config startup-config interface ethernet 1/2 show running-config Abbreviation conf t copy run start int e 1/2 sh run Completing a Partial Command Name If you cannot remember a complete command name or if you want to reduce the amount of typing you have to perform, enter the first few letters of the command, and then press the Tab key. The command line parser will complete the command if the string entered is unique to the command mode. If your keyboard does not have a Tab key, press Ctrl-I instead. The CLI recognizes a command once you have entered enough characters to make the command unique. For example, if you enter conf in EXEC mode, the CLI will be able to associate your entry with the configure command, because only the configure command begins with conf. In the following example, the CLI recognizes the unique string for conf in EXEC mode when you press the Tab key: switch# conf<tab> switch# configure When you use the command completion feature, the CLI displays the full command name. The CLI does not execute the command until you press the Return or Enter key. This feature allows you to modify the command if the full command was not what you intended by the abbreviation. If you enter a set of characters that could indicate more than one command, a list of matching commands displays. For example, entering co<tab> lists all commands available in EXEC mode beginning with co: switch# co<tab> configure copy switch# co Note that the characters you entered appear at the prompt again to allow you to complete the command entry. 42

57 Understanding the Command-Line Interface Identifying Your Location in the Command Hierarchy Identifying Your Location in the Command Hierarchy Some features have a configuration submode hierarchy nested more than one level. In these cases, you can display information about your present working context (PWC). Procedure Step 1 where detail Displays the PWC. switch# configure terminal switch(config)# interface mgmt0 switch(config-if)# where detail mode: conf interface mgmt0 username: admin routing-context vrf: default Using the no Form of a Command Almost every configuration command has a no form that can be used to disable a feature, revert to a default value, or remove a configuration. This example shows how to disable a feature: switch# configure terminal switch(config)# feature tacacs+ switch(config)# no feature tacacs+ This example shows how to revert to the default value for a feature: switch# configure terminal switch(config)# banner motd #Welcome to the switch# switch(config)# show banner motd Welcome to the switch switch(config)# no banner motd switch(config)# show banner motd User Access Verification This example shows how to remove the configuration for a feature: switch# configure terminal switch(config)# radius-server host switch(config)# show radius-server retransmission count:0 timeout value:1 deadtime value:1 total number of servers:1 following RADIUS servers are configured: : available for authentication on port:1812 available for accounting on port: : 43

58 Configuring CLI Variables Understanding the Command-Line Interface available for authentication on port:1812 available for accounting on port:1813 switch(config)# no radius-server host switch(config)# show radius-server retransmission count:0 timeout value:1 deadtime value:1 total number of servers:1 following RADIUS servers are configured: : available for authentication on port:1812 available for accounting on port:1813 This example shows how to use the no form of a command in EXEC mode: switch# cli var name testinterface ethernet1/2 switch# show cli variables SWITCHNAME="switch" TIMESTAMP=" " testinterface="ethernet1/2" switch# cli no var name testinterface switch# show cli variables SWITCHNAME="switch" TIMESTAMP=" " Configuring CLI Variables About CLI Variables This section describes CLI variables in the Cisco NX-OS CLI. The Cisco NX-OS software supports the definition and use of variables in CLI commands. You can refer to CLI variables in the following ways: Entered directly on the command line. Passed to a script initiated using the run-script command. The variables defined in the parent shell are available for use in the child run-script command process. CLI variables have the following characteristics: Cannot have nested references through another variable Can persist across switch reloads or exist only for the current session Cisco NX-OS supports one predefined variable: TIMESTAMP. This variable refers to the current time when the command executes in the format YYYY-MM-DD-HH.MM.SS. Note The TIMESTAMP variable name is case sensitive. All letters must be uppercase. 44

59 Understanding the Command-Line Interface Configuring CLI Session-Only Variables Configuring CLI Session-Only Variables You can define CLI session variables to persist only for the duration of your CLI session. These variables are useful for scripts that you execute periodically. You can reference the variable by enclosing the name in parentheses and preceding it with a dollar sign ($), for example $(variable-name). Procedure Step 1 Step 2 cli var name variable-name variable-text switch# cli var name testinterface ethernet 2/1 show cli variables switch# show cli variables Configures the CLI session variable. The variable-name argument is alphanumeric, case sensitive, and has a maximum length of 31 characters. The variable-text argument is alphanumeric, case sensitive, can contain spaces, and has a maximum length of 200 characters. (Optional) Displays the CLI variable configuration. Configuring Persistent CLI Variables You can configure CLI variables that persist across CLI sessions and device reloads. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 Step 3 switch# configure terminal switch(config)# cli var name variable-name variable-text switch(config)# cli var name testinterface ethernet 2/1 exit Configures the CLI persistent variable. The variable name is a case-sensitive, alphanumeric string and must begin with an alphabetic character. The maximum length is 31 characters. Exits global configuration mode. switch(config)# exit switch# 45

60 Command Aliases Understanding the Command-Line Interface Step 4 Step 5 show cli variables switch# show cli variables copy running-config startup-config switch(config)# copy running-config startup-config (Optional) Displays the CLI variable configuration. (Optional) Copies the running configuration to the startup configuration. Command Aliases About Command Aliases This section provides information about command aliases. You can define command aliases to replace frequently used commands. The command aliases can represent all or part of the command syntax. Command alias support has the following characteristics: Command aliases are global for all user sessions. Command aliases persist across reboots if you save them to the startup configuration. Command alias translation always takes precedence over any keyword in any configuration mode or submode. Command alias configuration takes effect for other user sessions immediately. The Cisco NX-OS software provides one default alias, alias, which is the equivalent to the show cli alias command that displays all user-defined aliases. You cannot delete or change the default command alias alias. You can nest aliases to a maximum depth of 1. One command alias can refer to another command alias that must refer to a valid command, not to another command alias. A command alias always replaces the first command keyword on the command line. You can define command aliases for commands in any command mode. If you reference a CLI variable in a command alias, the current value of the variable appears in the alias, not the variable reference. You can use command aliases for show command searching and filtering. 46

61 Understanding the Command-Line Interface Defining Command Aliases Defining Command Aliases You can define command aliases for commonly used commands. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 Step 3 switch# configure terminal switch(config)# cli alias name alias-name alias-text switch(config)# cli alias name ethint interface ethernet exit Configures the command alias. The alias name is an alphanumeric string that is not case sensitive and must begin with an alphabetic character. The maximum length is 30 characters. Exits global configuration mode. Step 4 Step 5 switch(config)# exit switch# alias switch# alias copy running-config startup-config switch# copy running-config startup-config (Optional) Displays the command alias configuration. (Optional) Copies the running configuration to the startup configuration. Configuring Command Aliases for a User Session You can create a command alias for the current user session that is not available to any other user on the Cisco NX-OS device. You can also save the command alias for future use by the current user account. 47

62 Command Scripts Understanding the Command-Line Interface Procedure Step 1 terminal alias [persist] alias-name command-string switch# terminal alias shintbr show interface brief Configures a command alias for the current user session. Use the persist keyword to save the alias for future use by the user account. Note Do not abbreviate the persist keyword. Command Scripts Running a Command Script This section describes how you can create scripts of commands to perform multiple tasks. You can create a list of commands in a file and execute them from the CLI. You can use CLI variables in the command script. Note You cannot create the script files at the CLI prompt. You can create the script file on a remote device and copy it to the bootflash: or volatile: directory on the Cisco NX-OS device. Procedure Step 1 run-script [bootflash: volatile:] filename switch# run-script testfile Executes the commands in the file on the default directory. Echoing Information to the Terminal You can echo information to the terminal, which is particularly useful from a command script. You can reference CLI variables and use formatting options in the echoed text. This table lists the formatting options that you can insert in the text. 48

63 Understanding the Command-Line Interface Delaying Command Action Table 8: Formatting Options for the echo Command Formatting Option \b \c \f \n \r \t \v \\ \nnn Description Inserts back spaces. Removes the new line character at the end of the text string. Inserts a form feed character. Inserts a new line character. Returns to the beginning of the text line. Inserts a horizontal tab character. Inserts a vertical tab character. Displays a backslash character. Displays the corresponding ASCII octal character. Procedure Step 1 echo [backslash-interpret] [text] switch# echo This is a test. This is a test. The backslash-interpret keyword indicates that the text string contains formatting options. The text argument is alphanumeric, case sensitive, and can contain blanks. The maximum length is 200 characters. The default is a blank line. Delaying Command Action You can delay a command action for a period of time, which is particularly useful within a command script. Procedure Step 1 sleep seconds switch# sleep 30 Causes a delay for a number of seconds. The range is from 0 to

64 Context-Sensitive Help Understanding the Command-Line Interface Context-Sensitive Help The Cisco NX-OS software provides context-sensitive help in the CLI. You can use a question mark (?) at any point in a command to list the valid input options. CLI uses the caret (^) symbol to isolate input errors. The ^ symbol appears at the point in the command string where you have entered an incorrect command, keyword, or argument. This table shows example outputs of context sensitive help. 50

65 Understanding the Command-Line Interface Context-Sensitive Help Table 9: Context-Sensitive Help Example Example Outputs switch# clock? set HH:MM:SS Current Time switch# clock switch# clock set? WORD HH:MM:SS Current Time switch# clock set switch# clock set 13:32:00<CR> % Incomplete command switch# switch# <Ctrl-P> switch# clock set 13:32:00 switch# clock set 13:32:00? <1-31> Day of the month switch# clock set 13:32:00 switch# clock set 13:32:00 18? April Month of the year August Month of the year December Month of the year February Month of the year January Month of the year July Month of the year June Month of the year March Month of the year May Month of the year November Month of the year October Month of the year September Month of the year switch# clock set 13:32:00 18 switch# clock set 13:32:00 18 April 13<CR> % Invalid input detected at '^' marker. switch# clock set 13:32:00 18 April? < > Enter the year (no abbreviation) switch# clock set 13:32:00 18 April switch# clock set 13:32:00 18 April 2013<CR> switch# Description Displays the command syntax for the clock command in EXEC mode. The switch output shows that the set keyword is required for using the clock command. Displays the command syntax for setting the time. The help output shows that the current time is required for setting the clock and how to format the time. Adds the current time. The CLI indicates the command is incomplete. Displays the previous command that you entered. Displays the additional arguments for the clock set command. Displays the additional arguments for the clock set command. Adds the date to the clock setting. The CLI indicates an error with the caret symbol (^) at 13. Displays the correct arguments for the year. Enters the correct syntax for the clock set command. 51

66 Understanding Regular Expressions Understanding the Command-Line Interface Understanding Regular Expressions Special Characters The Cisco NX-OS software supports regular expressions for searching and filtering in CLI output, such as the show commands. Regular expressions are case sensitive and allow for complex matching requirements. You can also use other keyboard characters (such as! or ~) as single-character patterns, but certain keyboard characters have special meanings when used in regular expressions. This table lists the keyboard characters that have special meanings. Table 10: Special Characters with Special Meaning Character. * +? ^ $ _ (underscore) Special Meaning Matches any single character, including white space. Matches 0 or more sequences of the pattern. Matches 1 or more sequences of the pattern. Matches 0 or 1 occurrences of the pattern. Matches the beginning of the string. Matches the end of the string. Matches a comma (,), left brace ({), right brace (}), left parenthesis ( ( ), right parenthesis ( ) ), the beginning of the string, the end of the string, or a space. Note The underscore is only treated as a regular expression for BGP-related commands To use these special characters as single-character patterns, remove the special meaning by preceding each character with a backslash (\). This example contains single-character patterns that match a dollar sign ($), an underscore (_), and a plus sign (+), respectively: \$ \_ \+ Multiple-Character Patterns You can also specify a pattern that contains multiple characters by joining letters, digits, or keyboard characters that do not have special meanings. For example, a4% is a multiple-character regular expression. With multiple-character patterns, the order is important. The regular expression a4% matches the character a followed by a 4 followed by a percent sign (%). If the string does not have a4%, in that order, pattern matching 52

67 Understanding the Command-Line Interface Anchoring fails. The multiple-character regular expression a. (the character a followed by a period) uses the special meaning of the period character to match the letter a followed by any single character. With this example, the strings ab, a!, or a2 are all valid matches for the regular expression. You can remove the special meaning of a special character by inserting a backslash before it. For example, when the expression a\. is used in the command syntax, only the string a. will be matched. Anchoring You can match a regular expression pattern against the beginning or the end of the string by anchoring these regular expressions to a portion of the string using the special characters. This table lists the special characters that you can use for anchoring. Table 11: Special Characters Used for Anchoring Character ^ $ Description Matches the beginning of the string. Matches the end of the string. For example, the regular expression ^con matches any string that starts with con, and sole$ matches any string that ends with sole. Note The ^ symbol can also be used to indicate the logical function "not" when used in a bracketed range. For example, the expression [^abcd] indicates a range that matches any single letter, as long as it is not a, b, c, or d. Searching and Filtering show Command Output Often, the output from show commands can be lengthy and cumbersome. The Cisco NX-OS software provides the means to search and filter the output so that you can easily locate information. The searching and filtering options follow a pipe character ( ) at the end of the show command. You can display the options using the CLI context-sensitive help facility: switch# show running-config? cut Print selected parts of lines. diff Show difference between current and previous invocation (creates temp files: remove them with 'diff-clean' command and don't use it on commands with big outputs, like 'show tech'!) egrep Egrep - print lines matching a pattern grep Grep - print lines matching a pattern head Display first lines human Output in human format last Display last lines less Filter for paging no-more Turn-off pagination for command output perl Use perl script to filter output section Show lines that include the pattern as well as the subsequent lines that are more indented than matching line sed Stream Editor 53

68 Filtering and Searching Keywords Understanding the Command-Line Interface sort sscp tr uniq vsh wc xml begin count end exclude include Stream Sorter Stream SCP (secure copy) Translate, squeeze, and/or delete characters Discard all but one of successive identical lines The shell that understands cli command Count words, lines, characters Output in xml format (according to.xsd definitions) Begin with the line that matches Count number of lines End with the line that matches Exclude lines that match Include lines that match Filtering and Searching Keywords The Cisco NX-OS CLI provides a set of keywords that you can use with the show commands to search and filter the command output. This table lists the keywords for filtering and searching the CLI output. Table 12: Filtering and Searching Keywords Keyword Syntax begin string show version begin Hardware count show running-config count cut [-d character] {-b -c -f -s} show file testoutput cut -b 1-10 end string show running-config end interface exclude string show interface brief exclude down head [lines lines] show logging logfile head lines 50 Description Starts displaying at the line that contains the text that matches the search string. The search string is case sensitive. Displays the number of lines in the command output. Displays only part of the output lines. You can display a number of bytes (-b), characters (-vcut [-d character] {-b -c -f -s}), or fields (-f). You can also use the -d keyword to define a field delimiter other than the tag character default. The -s keyword suppresses the display of the line that does not contain the delimiter. Displays all lines up to the last occurrence of the search string. Displays all lines that do not include the search string. The search string is case sensitive. Displays the beginning of the output for the number of lines specified. The default number of lines is

69 Understanding the Command-Line Interface diff Utility Keyword Syntax human show version human include string show interface brief include up last [lines] show logging logfile last 50 no-more show interface brief no-more sscp SSH-connection-name filename show version sscp MyConnection show_version_output wc [bytes lines words] show file testoutput wc bytes xml show version xml Description Displays the output in normal format if you have previously set the output format to XML using the terminal output xml command. Displays all lines that include the search string. The search string is case sensitive. Displays the end of the output for the number of lines specified. The default number of lines is 10. Displays all the output without stopping at the end of the screen with the More prompt. Redirects the output using streaming secure copy (sscp) to a named SSH connection. You can create the SSH named connection using the ssh name command. Displays counts of characters, lines, or words. The default is to display the number of lines, words, and characters. Displays the output in XML format. diff Utility You can compare the output from a show command with the output from the previous invocation of that command. diff-clean [all-session] [all-users] This table describes the keywords for the diff utility. Keyword all-sessions all-users Description Removes diff temporary files from all sessions (past and present sessions) of the current user. Removes diff temporary files from all sessions (past and present sessions) of all users. 55

70 grep and egrep Utilities Understanding the Command-Line Interface The Cisco NX-OS software creates temporary files for the most current output for a show command for all current and previous users sessions. You can remove these temporary files using the diff-clean command. diff-clean [all-sessions all-users] By default, the diff-clean command removes the temporary files for the current user's active session. The all-sessions keyword removes temporary files for all past and present sessions for the current user. The all-users keyword removes temporary files for all past and present sessions for the all users. grep and egrep Utilities You can use the Global Regular Expression Print (grep) and Extended grep (egrep) command-line utilities to filter the show command output. The grep and egrep syntax is as follows: {grep egrep} [count] [ignore-case] [invert-match] [line-exp] [line-number] [next lines] [prev lines] [word-exp] expression}] This table lists the grep and egrep parameters. Table 13: grep and egrep Parameters Parameter count ignore-case invert-match line-exp line-number next lines prev lines word-exp expression Description Displays only the total count of matched lines. Specifies to ignore the case difference in matched lines. Displays lines that do not match the expression. Displays only lines that match a complete line. Specifies to display the line number before each matched line. Specifies the number of lines to display after a matched line. The default is 0. The range is from 1 to 999. Specifies the number of lines to display before a matched line. The default is 0. The range is from 1 to 999. Displays only lines that match a complete word. Specifies a regular expression for searching the output. 56

71 Understanding the Command-Line Interface less Utility less Utility You can use the less utility to display the contents of the show command output one screen at a time. You can enter less commands at the : prompt. To display all less commands you can use, enter h at the : prompt. Mini AWK Utility AWK is a simple but powerful utility to summarize text output. You can use this utility after a pipe ( ) to further process the text output of a command. Cisco NX-OS supports a mini AWK, which takes an inline program as an argument. This example shows how the mini AWK utility can be used to summarize the text output of the show ip route summary vrf all command: switch# show ip route summary vrf all grep "Total number of routes" Total number of routes: 3 Total number of routes: 10 switch# show ip route summary vrf all grep "Total number of routes" awk '{ x = x + $5} END { print x }' 13 sed Utility You can use the Stream Editor (sed) utility to filter and manipulate the show command output as follows: sed command The command argument contains sed utility commands. sort Utility You can use the sort utility to filter show command output. The sort utility syntax is as follows: sort [-M] [-b] [-d] [-f] [-g] [-i] [-k field-number[.char-position][ordering]] [-n] [-r] [-t delimiter] [-u] This table describes the sort utiliity parameters. Table 14: sort Utility Parameters Parameter -M -b -d -f Description Sorts by month. Ignores leading blanks (space characters). The default sort includes the leading blanks. Sorts by comparing only blanks and alphanumeric characters. The default sort includes all characters. Folds lowercase characters into uppercase characters. 57

72 Searching and Filtering from the --More-- Prompt Understanding the Command-Line Interface Parameter -g -i -k field-number[.char-position][ordering] -n -r -t delimiter -u Description Sorts by comparing a general numeric value. Sorts only using printable characters. The default sort includes nonprintable characters. Sorts according to a key value. There is no default key value. Sorts according to a numeric string value. Reverses order of the sort results. The default sort output is in ascending order. Sorts using a specified delimiter. The default delimiter is the space character. Removes duplicate lines from the sort results. The sort output displays the duplicate lines. Searching and Filtering from the --More-- Prompt You can search and filter output from --More - prompts in the show command output. This table describes the --More - prompt commands. Table 15: --More-- Prompt Commands Commands [lines]<space> [lines]z [lines]<return> Description Displays output lines for either the specified number of lines or the current screen size. Displays output lines for either the specified number of lines or the current screen size. If you use the lines argument, that value becomes the new default screen size. Displays output lines for either the specified number of lines or the current default number of lines. The initial default is 1 line. If you use the optional lines argument, that value becomes the new default number of lines to display for this command. 58

73 Understanding the Command-Line Interface Using the Command History Commands [lines]d or [lines]ctrl+shift+d q or Q or Ctrl-C [lines]s [lines]f = [count]/expression [count]n {! :![shell-cmd]}. Description Scrolls through output lines for either the specified number of lines or the current default number of lines. The initial default is 11 lines. If you use the optional lines argument, that value becomes the new default number of lines to display for this command. Exits the --More - prompt. Skips forward in the output for either the specified number of lines or the current default number of lines and displays a screen of lines. The default is 1 line. Skips forward in the output for either the specified number of screens or the current default number of screens and displays a screen of lines. The default is 1 screen. Displays the current line number. Skips to the line that matches the regular expression and displays a screen of output lines. Use the optional count argument to search for lines with multiple occurrences of the expression. This command sets the current regular expression that you can use in other commands. Skips to the next line that matches the current regular expression and displays a screen of output lines. Use the optional count argument to skip past matches. Executes the command specified in the shell-cmd argument in a subshell. Repeats the previous command. Using the Command History Recalling a Command The Cisco NX-OS software CLI allows you to access the command history for the current user session. You can recall and reissue commands, with or without modification. You can also clear the command history. You can recall a command in the command history to optionally modify and enter again. 59

74 Controlling CLI History Recall Understanding the Command-Line Interface This example shows how to recall a command and reenter it: switch(config)# show cli history 0 11:04:07 configure terminal 1 11:04:28 show interface ethernet 2/ :04:39 interface ethernet 2/ :05:13 no shutdown 4 11:05:19 exit 5 11:05:25 show cli history switch(config)#!1 switch(config)# show interface ethernet 2/24 You can also use the Ctrl-P and Ctrl-N keystroke shortcuts to recall commands. Controlling CLI History Recall You can control the commands that you recall from the CLI history using the Ctrl-P and Ctrl-N keystroke shortcuts. Cisco NX-OS software recalls all commands from the current command mode and higher command modes. For example, if you are working in global configuration mode, the command recall keystroke shortcuts recall both EXEC mode and global configuration mode commands. Configuring the CLI Edit Mode You can recall commands from the CLI history using the Ctrl-P and Ctrl-N keystroke shortcuts and edit them before reissuing them. The default edit mode is emacs. You can change the edit mode to vi. Procedure Step 1 [no] terminal edit-mode vi [persist] switch# terminal edit-mode vi Changes the CLI edit mode to vi for the user session. The persist keyword makes the setting persistent across sessions for the current username. Use the no to revert to using emacs. Displaying the Command History You can display the command history using the show cli history command. The show cli history command has the following syntax: show cli history [lines] [config-mode exec-mode this-mode-only] [unformatted] By default, the number of lines displayed is 12 and the output includes the command number and timestamp. This example shows how to display the default number of lines of the command history: switch# show cli history 60

75 Understanding the Command-Line Interface Enabling or Disabling the CLI Confirmation Prompts This example shows how to display 20 lines of the command history: switch# show cli history 20 This example shows how to display only the configuration commands in the command history: switch(config)# show cli history config-mode This example shows how to display only the EXEC commands in the command history: switch(config)# show cli history exec-mode This example shows how to display only the commands in the command history for the current command mode: switch(config-if)# show cli history this-mode-only This example shows how to display only the commands in the command history without the command number and timestamp: switch(config)# show cli history unformatted Enabling or Disabling the CLI Confirmation Prompts For many features, the Cisco NX-OS software displays prompts on the CLI that ask for confirmation before continuing. You can enable or disable these prompts. The default is enabled. Procedure Step 1 [no] terminal dont-ask [persist] switch# terminal dont-ask Disables the CLI confirmation prompt. The persist keyword makes the setting persistent across sessions for the current username. The default is enabled. Use the no form of the command to enable the CLI confirmation prompts. Setting CLI Display Colors You can change the CLI colors to display as follows: The prompt displays in green if the previous command succeeded. The prompt displays in red of the previous command failed. The user input displays in blue. The command output displays in the default color. 61

76 Sending Commands to Modules Understanding the Command-Line Interface The default colors are sent by the terminal emulator software. Procedure Step 1 terminal color [evening] [persist] switch# terminal color Sets the CLI display colors for the terminal session. The evening keyword is not supported. The persist keyword makes the setting persistent across sessions for the current username. The default setting is not persistent. Sending Commands to Modules You can send commands directly to modules from the supervisor module session using the slot command. The slot has the following syntax: slot slot-number [quoted] command-string By default, the keyword and arguments in the command-string argument are separated by a space. To send more than one command to a module, separate the commands with a space character, a semicolon character (;), and a space character. The quoted keyword indicates that the command string begins and ends with double quotation marks ("). Use this keyword when you want to redirect the module command output to a filtering utility, such as diff, that is supported only on the supervisor module session. This example shows how to display and filter module information: switch# slot 27 show version grep lc This example shows how to filter module information on the supervisor module session: switch# slot 27 quoted "show version" diff switch# slot 28 quoted "show version" diff -c *** /volatile/vsh_diff_1_root_8430_slot quoted_show_version.old Wed Apr 29 20:10: Wed Apr 29 20:10: *************** *** 1,5 ****! RAM kb! lc27 Software BIOS: version 6.20 system: version 6.1(2)I1(1) [build 6.1(2)] --- 1,5 ----! RAM kb! lc28 Software BIOS: version 6.20 system: version 6.1(2)I1(1) [build 6.1(2)] *************** *** 12,16 **** Hardware bootflash: 0 blocks (block size 512b)! uptime is 0 days 1 hours 45 minute(s) 34 second(s) 62

77 Understanding the Command-Line Interface Sending Command Output in , Hardware bootflash: 0 blocks (block size 512b)! uptime is 0 days 1 hours 45 minute(s) 42 second(s) Sending Command Output in You can use the CLI to send the output of a show command to an address using the pipe operator ( ). Note The configuration remains persistent for all show command output until it is reconfigured. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 switch# configure terminal switch(config)# Enters configuration mode. Step 3 Step 4 Step 5 switch(config)# switch(config- )# smtp-host ip-address smtp-port port switch(config- )# smtp-host smtp-port 25 vrf management switch(config- )# vrf management from -address Specifies the SMTP host IP address and the SMTP port number. Specifies a VRF for the transmission. Specifies the sender's address. Step 6 switch(config- )# from admin@mycompany.com reply-to -address Specifies the recipient's address. switch(config- )# reply-to admin@mycompany.com 63

78 BIOS Loader Prompt Understanding the Command-Line Interface Step 7 exit Exits configuration mode. Step 8 switch(config- )# exit switch(config)# exit Exits global configuration mode. Step 9 switch(config)# exit switch# show Displays the configuration. Step 10 switch# show show-command subject subject -address switch# show interface brief subject show-interface admin@mycompany.com sent Uses the pipe operator ( ) to send the output of the specified show command with a subject to an address. BIOS Loader Prompt When the supervisor modules power up, a specialized BIOS image automatically loads and tries to locate a valid nx-os image for booting the system. If a valid nx-os image is not found, the following BIOS loader prompt displays: loader> For information on how to load the Cisco NX-OS software from the loader> prompt, see the Cisco Nexus 9000 Series NX-OS Troubleshooting Guide. Examples Using the CLI This section includes examples of using the CLI. Using the System-Defined Timestamp Variable This example uses $(TIMESTAMP) when redirecting show command output to a file: switch# show running-config > rcfg.$(timestamp) Preparing to copy...done switch# dir 64

79 Understanding the Command-Line Interface Using CLI Session Variables May 01 12:27: rcfg Usage for bootflash://sup-local 8192 bytes used bytes free bytes total Using CLI Session Variables You can reference a variable using the syntax $(variable-name). This example shows how to reference a user-defined CLI session variable: switch# show interface $(testinterface) Ethernet2/1 is down (Administratively down) Hardware is 10/100/1000 Ethernet, address is (bia c.4dac) MTU 1500 bytes, BW Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA auto-duplex, auto-speed Beacon is turned off Auto-Negotiation is turned on Input flow-control is off, output flow-control is off Auto-mdix is turned on Switchport monitor is off Last clearing of "show interface" counters never 5 minute input rate 0 bytes/sec, 0 packets/sec 5 minute output rate 0 bytes/sec, 0 packets/sec L3 in Switched: ucast: 0 pkts, 0 bytes - mcast: 0 pkts, 0 bytes L3 out Switched: ucast: 0 pkts, 0 bytes - mcast: 0 pkts, 0 bytes Rx 0 input packets 0 unicast packets 0 multicast packets 0 broadcast packets 0 jumbo packets 0 storm suppression packets 0 bytes Tx 0 output packets 0 multicast packets 0 broadcast packets 0 jumbo packets 0 bytes 0 input error 0 short frame 0 watchdog 0 no buffer 0 runt 0 CRC 0 ecc 0 overrun 0 underrun 0 ignored 0 bad etype drop 0 bad proto drop 0 if down drop 0 input with dribble 0 input discard 0 output error 0 collision 0 deferred 0 late collision 0 lost carrier 0 no carrier 0 babble 0 Rx pause 0 Tx pause 0 reset Defining Command Aliases This example shows how to define command aliases: cli alias name ethint interface ethernet cli alias name shintbr show interface brief cli alias name shintupbr shintbr include up include ethernet This example shows how to use a command alias: switch# configure terminal switch(config)# ethint 2/3 65

80 Running a Command Script Understanding the Command-Line Interface switch(config-if)# Running a Command Script This example displays the CLI commands specified in the script file: switch# show file testfile configure terminal interface ethernet 2/1 no shutdown end show interface ethernet 2/1 This example displays the run-script command execution output: switch# run-script testfile `configure terminal` `interface ethernet 2/1` `no shutdown` `end` `show interface ethernet 2/1 ` Ethernet2/1 is down (Link not connected) Hardware is 10/100/1000 Ethernet, address is c.4dac (bia c.4dac) MTU 1500 bytes, BW Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA Port mode is trunk auto-duplex, auto-speed Beacon is turned off Auto-Negotiation is turned on Input flow-control is off, output flow-control is off Auto-mdix is turned on Switchport monitor is off Last clearing of "show interface" counters 1d26.2uh 5 minute input rate 0 bytes/sec, 0 packets/sec 5 minute output rate 0 bytes/sec, 0 packets/sec Rx 0 input packets 0 unicast packets 0 multicast packets 0 broadcast packets 0 jumbo packets 0 storm suppression packets 0 bytes Tx 0 output packets 0 multicast packets 0 broadcast packets 0 jumbo packets 0 bytes 0 input error 0 short frame 0 watchdog 0 no buffer 0 runt 0 CRC 0 ecc 0 overrun 0 underrun 0 ignored 0 bad etype drop 0 bad proto drop 0 if down drop 0 input with dribble 0 input discard 0 output error 0 collision 0 deferred 0 late collision 0 lost carrier 0 no carrier 0 babble 0 Rx pause 0 Tx pause 0 reset Sending Command Output in This example shows how to send the output of the show interface brief command to an address using the pipe operator ( ): switch<config># switch(config- )# smtp-host smtp-port 25 switch(config- )# vrf management switch(config- )# from admin@mycompany.com 66

81 Understanding the Command-Line Interface Additional References for the CLI switch(config- )# reply-to switch(config- )# exit switch(config)# exit switch# show SMTP host: SMTP port: 25 Reply to: From: VRF: management switch# show interface brief subject show-interface sent The sent to with the subject "show-interface" shows the output of the command: <snip> Ethernet VLAN Type Mode Status Reason Speed Port Interface Ch # Eth1/1 -- eth trunk up none 10G (D) -- Eth1/2 -- eth routed down Link not connected auto(d) -- Eth1/3 -- eth routed up none 10G (D) -- Eth1/4 -- eth routed down Link not connected auto (D) -- Eth1/5 -- eth routed down Link not connected auto (D) -- Eth1/6 -- eth routed down Link not connected auto (D) -- Eth1/7 -- eth routed down Link not connected auto (D) -- Eth1/8 -- eth routed down Link not connected auto (D) -- Eth1/9 -- eth routed down Link not connected auto (D) -- Eth1/10 -- eth routed down Link not connected auto (D) -- <snip> Additional References for the CLI This section includes additional information related to the CLI. Related Documents for the CLI Related Topic Cisco NX-OS Licensing Document Title Cisco NX-OS Licensing Guide 67

82 Related Documents for the CLI Understanding the Command-Line Interface 68

83 CHAPTER 6 Configuring Terminal Settings and Sessions This chapter contains the following sections: About Terminal Settings and Sessions, page 69 Licensing Requirements for Terminal Settings and Sessions, page 70 Default Settings for File System Parameters, page 71 Configuring the Console Port, page 71 Configuring Virtual Terminals, page 72 Clearing Terminal Sessions, page 74 Displaying Terminal and Session Information, page 75 Additional References for Terminal Settings and Sessions, page 75 About Terminal Settings and Sessions This section includes information about terminal settings and sessions. Terminal Session Settings The Cisco NX-OS software features allow you to manage the following characteristics of terminals: Terminal type Name used by Telnet when communicating with remote hosts Length Number of lines of command output displayed before pausing Width Number of characters displayed before wrapping the line 69

84 Console Port Configuring Terminal Settings and Sessions Inactive session timeout Number of minutes that a session remains inactive before the device terminates it Console Port The console port is an asynchronous serial port that allows you to connect to the device for initial configuration through a standard RS-232 port with an RJ-45 connector. Any device connected to this port must be capable of asynchronous transmission. You can configure the following parameters for the console port: Data bits Specifies the number of bits in an 8-bit byte that is used for data. Inactive session timeout Parity Speed Stop bits Specifies the number of minutes a session can be inactive before it is terminated. Specifies the odd or even parity for error detection. Specifies the transmission speed for the connection. Specifies the stop bits for an asynchronous line. Configure your terminal emulator with 9600 baud, 8 data bits, 1 stop bit, and no parity. Virtual Terminals You can use virtual terminal lines to connect to your device. Secure Shell (SSH) and Telnet create virtual terminal sessions. You can configure an inactive session timeout and a maximum sessions limit for virtual terminals. Licensing Requirements for Terminal Settings and Sessions The following table shows the licensing requirements for this feature: Product Cisco NX-OS License Requirement Terminal setting configuration requires no license. Any feature not included in a license package is bundled with the nx-os image and is provided at no extra charge to you. For a complete explanation of the Cisco NX-OS licensing scheme, see the Cisco NX-OS Licensing Guide. 70

85 Configuring Terminal Settings and Sessions Default Settings for File System Parameters Default Settings for File System Parameters This table lists the default settings for the file system parameters. Table 16: Default File System Settings Parameters Default filesystem Default bootflash: Configuring the Console Port You can set the following characteristics for the console port: Data bits Inactive session timeout Parity Speed Stop bits Before You Begin Log in to the console port. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 switch# configure terminal switch(config)# line console Enters console configuration mode. Step 3 switch# line console switch(config-console)# databits bits switch(config-console)# databits 7 Configures the number of data bits per byte. The range is from 5 to 8. The default is 8. 71

86 Configuring Virtual Terminals Configuring Terminal Settings and Sessions Step 4 exec-timeout minutes switch(config-console)# exec-timeout 30 Configures the timeout for an inactive session. The range is from 0 to minutes (8760 hours). A value of 0 minutes disables the session timeout. The default is 30 minutes. Step 5 parity {even none odd} Configures the parity. The default is none. Step 6 switch(config-console)# parity even speed { } Configures the transmit and receive speed. The default is Step 7 switch(config-console)# speed stopbits {1 2} Configures the stop bits. The default is 1. Step 8 switch(config-console)# stopbits 2 exit Exits console configuration mode. Step 9 Step 10 switch(config-console)# exit switch(config)# show line console switch(config)# show line console copy running-config startup-config switch(config)# copy running-config startup-config (Optional) Displays the console settings. (Optional) Copies the running configuration to the startup configuration. Configuring Virtual Terminals This section describes how to configure virtual terminals on Cisco NX-OS devices. Configuring the Inactive Session Timeout You can configure a timeout for inactive virtual terminal sessions on the device. 72

87 Configuring Terminal Settings and Sessions Configuring the Session Limit Procedure Step 1 configure terminal Enters global configuration mode. Step 2 switch# configure terminal switch(config)# line vty Enters line configuration mode. Step 3 Step 4 switch# line vty switch(config-line)# exec-timeout minutes switch(config-line)# exec-timeout 30 exit Configures the inactive session timeout. The range is from 0 to minutes (8760 hours). A value of 0 minutes disables the timeout. The default value is 30. Exits line configuration mode. Step 5 Step 6 switch(config-line)# exit switch(config)# show running-config all begin vty switch(config)# show running-config all begin vty copy running-config startup-config switch(config)# copy running-config startup-config (Optional) Displays the virtual terminal configuration. (Optional) Copies the running configuration to the startup configuration. Configuring the Session Limit You can limit the number of virtual terminal sessions on your device. Procedure Step 1 configure terminal Enters global configuration mode. switch# configure terminal switch(config)# 73

88 Clearing Terminal Sessions Configuring Terminal Settings and Sessions Step 2 line vty Enters line configuration mode. Step 3 Step 4 switch# line vty switch(config-line)# session-limit sessions switch(config-line)# session-limit 10 exit Configures the maximum number of virtual sessions for your device. The range is from 1 to 64. The default is 32. Exits line configuration mode. Step 5 Step 6 switch(config-line)# exit switch(config)# show running-config all being vty switch(config)# show running-config all begin vty copy running-config startup-config switch(config)# copy running-config startup-config (Optional) Displays the virtual terminal configuration. (Optional) Copies the running configuration to the startup configuration. Clearing Terminal Sessions You can clear terminal sessions on your device. Procedure Step 1 Step 2 show users switch# show users clear line name switch# clear line pts/0 (Optional) Displays the user sessions on the device. Clears a terminal session on a specific line. The line name is case sensitive. 74

89 Configuring Terminal Settings and Sessions Displaying Terminal and Session Information Displaying Terminal and Session Information To display terminal and session information, perform one of the following tasks: Command show terminal show line show users show running-config [all] Displays terminal settings. Displays the COM1 and console ports settings. Displays virtual terminal sessions. Displays the user account configuration in the running configuration. The all keyword displays the default values for the user accounts. Additional References for Terminal Settings and Sessions This section includes additional references for terminal settings and sessions on Cisco NX-OS devices. Related Documents for Terminal Settings and Sessions Related Topic Licensing Document Title Cisco NX-OS Licensing Guide 75

90 Related Documents for Terminal Settings and Sessions Configuring Terminal Settings and Sessions 76

91 CHAPTER 7 Basic Device Management This chapter contains the following sections: About Basic Device Management, page 77 Licensing Requirements for Basic Device Management, page 78 Default Settings for Basic Device Parameters, page 79 Changing the Device Hostname, page 79 Configuring the MOTD Banner, page 80 Configuring the Time Zone, page 80 Configuring Summer Time (Daylight Saving Time), page 81 Manually Setting the Device Clock, page 82 Setting the Clock Manager, page 83 Managing Users, page 84 Verifying the Device Configuration, page 84 Additional References for Basic Device Management, page 85 About Basic Device Management This section provides information about basic device management. Device Hostname You can change the device hostname displayed in the command prompt from the default (switch) to another character string. When you give the device a unique hostname, you can easily identify the device from the command-line interface (CLI) prompt. 77

92 Message-of-the-Day Banner Basic Device Management Message-of-the-Day Banner The message-of-the-day (MOTD) banner displays before the user login prompt on the device. This message can contain any information that you want to display for users of the device. Device Clock If you do not synchronize your device with a valid outside timing mechanism, such as an NTP clock source, you can manually set the clock time when your device boots. Clock Manager The Cisco NX-OS device might contain clocks of different types that might need to be synchronized. These clocks are a part of various components (such as the supervisor, line card processors, or line cards), and each might be using a different protocol. The clock manager provides a way to synchronize these different clocks. Time Zone and Summer Time (Daylight Saving Time) You can configure the time zone and summer time (daylight saving time) setting for your device. These values offset the clock time from Coordinated Universal Time (UTC). UTC is International Atomic Time (TAI) with leap seconds added periodically to compensate for the Earth's slowing rotation. UTC was formerly called Greenwich Mean Time (GMT). User Sessions You can display the active user session on your device. You can also send messages to the user sessions. For more information about managing user sessions and accounts, see the Cisco Nexus 9000 Series NX-OS Security Configuration Guide. Licensing Requirements for Basic Device Management The following table shows the licensing requirements for this feature: Product Cisco NX-OS License Requirement Basic device management requires no license. Any feature not included in a license package is bundled with the nx-os image and is provided at no extra charge to you. For a complete explanation of the Cisco NX-OS licensing scheme, see the Cisco NX-OS Licensing Guide. 78

93 Basic Device Management Default Settings for Basic Device Parameters Default Settings for Basic Device Parameters This table lists the default settings for basic device parameters. Table 17: Default Basic Device Parameters Parameters MOTD banner text Clock time zone Default User Access Verification UTC Changing the Device Hostname You can change the device hostname displayed in the command prompt from the default (switch) to another character string. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 Step 3 switch# configure terminal switch(config)# {hostname switchname} name Using the hostname command: switch(config)# hostname Engineering1 Engineering1(config)# Using the switchname command: Engineering1(config)# switchname Engineering2 Engineering2(config)# exit Changes the device hostname. The name argument is alphanumeric, case sensitive, and has a maximum length of 32 characters. The default is switch. Note The switchname command performs the same function as the hostname command. Exits global configuration mode. Step 4 Engineering2(config)# exit Engineering2# copy running-config startup-config Engineering2# copy running-config startup-config (Optional) Copies the running configuration to the startup configuration. 79

94 Configuring the MOTD Banner Basic Device Management Configuring the MOTD Banner You can configure the MOTD to display before the login prompt on the terminal when a user logs in. The MOTD banner has the following characteristics: Maximum of 80 characters per line Maximum of 40 lines Procedure Step 1 configure terminal Enters global configuration mode. Step 2 Step 3 switch# configure terminal switch(config)# banner motd delimiting-character message delimiting-character switch(config)# banner motd #Welcome to the Switch# switch(config)# exit Configures the MOTD banner. Do not use the delimiting-character in the message text. Note Do not use " or % as a delimiting character. Exits global configuration mode. Step 4 Step 5 switch(config)# exit switch# show banner motd switch# show banner motd copy running-config startup-config switch# copy running-config startup-config (Optional) Displays the configured MOTD banner. (Optional) Copies the running configuration to the startup configuration. Configuring the Time Zone You can configure the time zone to offset the device clock time from UTC. 80

95 Basic Device Management Configuring Summer Time (Daylight Saving Time) Procedure Step 1 configure terminal Enters global configuration mode. Step 2 Step 3 switch# configure terminal switch(config)# clock timezone zone-name offset-hours offset-minutes switch(config)# clock timezone EST -5 0 exit Configures the time zone. The zone-name argument is a 3-character string for the time zone acronym (for example, PST or EST). The offset-hours argument is the offset from the UTC and the range is from 23 to 23 hours. The range for the offset-minutes argument is from 0 to 59 minutes. Exits global configuration mode. Step 4 Step 5 switch(config)# exit switch# show clock switch# show clock copy running-config startup-config switch# copy running-config startup-config (Optional) Displays the time and time zone. (Optional) Copies the running configuration to the startup configuration. Configuring Summer Time (Daylight Saving Time) You can configure when summer time, or daylight saving time, is in effect for the device and the offset in minutes. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 switch# configure terminal switch(config)# clock summer-time zone-name start-week start-day start-month start-time Configures summer time or daylight saving time. 81

96 Manually Setting the Device Clock Basic Device Management end-week end-day end-month end-time offset-minutes switch(config)# clock summer-time PDT 1 Sunday March 02:00 1 Sunday November 02:00 60 The zone-name argument is a three character string for the time zone acronym (for example, PST and EST). The values for the start-day and end-day arguments are Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, and Sunday. The values for the start-month and end-month arguments are January, February, March, April, May, June, July, August, September, October, November, and December. The value for the start-time and end-time arguments are in the format hh:mm. The range for the offset-minutes argument is from 0 to 1440 minutes. Step 3 exit Exits global configuration mode. Step 4 Step 5 switch(config)# exit switch# show clock detail switch(config)# show clock detail copy running-config startup-config switch# copy running-config startup-config (Optional) Displays the configured MOTD banner. (Optional) Copies the running configuration to the startup configuration. Manually Setting the Device Clock You can set the clock manually if your device cannot access a remote time source. Before You Begin Configure the time zone. Procedure Step 1 clock set time day month year Configures the device clock. 82

97 Basic Device Management Setting the Clock Manager Step 2 switch# clock set 15:00:00 30 May 2013 Fri May 30 15:14:00 PDT 2013 show clock switch(config)# show clock The format for the time argument is hh:mm:ss. The range for the day argument is from 1 to 31. The values for the month argument are January, February, March, April, May, June, July, August, September, October, November, and December. The range for the year argument is from 2000 to (Optional) Displays the current clock value. Related Topics Configuring the Time Zone, on page 80 Setting the Clock Manager You can configure the clock manager to synchronize all the clocks of the components in the Cisco Nexus device. Procedure Step 1 Step 2 clock protocol protocol switch# clock protocol ntp show run clock_manager switch# show run clock_manager Configures the clock manager. The values for the protocol argument are ntp and none. The following describes the values: ntp Synchronizes clocks with Network Time Protocol (NTP). none Uses clock set HH:MM:SS to set the supervisor clock. Note Note When none is used, the clock must be configured. Once the protocol is configured, the clock must use that protocol. (Optional) Displays the configuration of the clock manager. 83

98 Managing Users Basic Device Management Managing Users You can display information about users logged into the device and send messages to those users. Displaying Information about the User Sessions You can display information about the user session on the device. Procedure Step 1 show users Displays the user sessions. switch# show users Sending a Message to Users You can send a message to active users currently using the device CLI. Procedure Step 1 Step 2 show users switch# show users send [session line] message-text switch# send Reloading the device is 10 minutes! (Optional) Displays the active user sessions. Sends a message to all active users or to a specific user. The message can be up to 80 alphanumeric characters and is case sensitive. Verifying the Device Configuration To verify the configuration after bootstrapping the device using POAP, use one of the following commands: 84

99 Basic Device Management Additional References for Basic Device Management Command show running-config show startup-config Displays the running configuration. Displays the startup configuration. Additional References for Basic Device Management You can find additional information related to basic device management. Related Documents for Basic Device Management Related Topic Licensing Document Title Cisco NX-OS Licensing Guide 85

100 Related Documents for Basic Device Management Basic Device Management 86

101 CHAPTER 8 Using the Device File Systems, Directories, and Files This chapter contains the following sections: About the Device File Systems, Directories, and Files, page 87 Licensing Requirements for File Systems, Directories, and Files, page 89 Default Settings for File System Parameters, page 89 Configuring the FTP, HTTP, or TFTP Source Interface, page 89 Working with Directories, page 90 Working with Files, page 92 Working with Archive Files, page 97 Examples of Using the File System, page 99 Additional References for File Systems, page 103 About the Device File Systems, Directories, and Files This section describes file systems, directories, and files on the Cisco NX-OS device. File Systems The syntax for specifying a local file system is filesystem:[//modules/]. This table describes file systems that you can reference on your device. 87

102 Directories Using the Device File Systems, Directories, and Files Table 18: File System Syntax Components File System Name bootflash volatile log system debug Module sup-active sup-local sup-standby sup-remote Description Internal CompactFlash memory located on the active supervisor module used for storing image files, configuration files, and other miscellaneous files. The initial default directory is bootflash. Internal CompactFlash memory located on the standby supervisor module used for storing image files, configuration files, and other miscellaneous files. Volatile random-access memory (VRAM) located on a supervisor module used for temporary or pending changes. Memory on the active supervisor that stores logging file statistics. Memory on a supervisor module used for storing the running-configuration file. Memory on a supervisor module used for debug logs. Directories You can create directories on bootflash: and external flash memory (usb1: and usb2:). You can navigate through these directories and use them for files. Files You create and access files on bootflash:, volatile:, usb1:, and usb2: filesystems. You can only access files on the system: filesystem. You can use the log: filesystem for debug log files. You can download files, such as the nx-os image file, from remote servers using FTP, Secure Copy (SCP), Secure Shell FTP (SFTP), and TFTP. You can also copy files from an external server to the device, because the device can act as an SCP server. 88

103 Using the Device File Systems, Directories, and Files Licensing Requirements for File Systems, Directories, and Files Licensing Requirements for File Systems, Directories, and Files The following table shows the licensing requirements for this feature: Product Cisco NX-OS License Requirement Using the file systems, directories, and files requires no license. Any feature not included in a license package is bundled with the nx-os image and is provided at no extra charge to you. For a complete explanation of the Cisco NX-OS licensing scheme, see the Cisco NX-OS Licensing Guide. Default Settings for File System Parameters This table lists the default settings for the file system parameters. Table 19: Default File System Settings Parameters Default filesystem Default bootflash: Configuring the FTP, HTTP, or TFTP Source Interface You can configure the source interface for the File Transfer Protocol (FTP), Hypertext Transfer Protocol (HTTP), or Trivial File Transfer Protocol (TFTP). This configuration allows you to use the IP address associated with the configured source interface when copy packets are transferred. Procedure Step 1 configure terminal Enters global configuration mode. Step 2 switch# configure terminal switch(config)# [no] ip {ftp http tftp} source-interface {ethernet slot/port loopback number} Configures the source interface for all FTP, HTTP, or TFTP packets. switch(config)# ip tftp source-interface ethernet 2/1 89

104 Working with Directories Using the Device File Systems, Directories, and Files Step 3 copy running-config startup-config switch(config)# copy running-config startup-config (Optional) Copies the running configuration to the startup configuration. Working with Directories This section describes how to work with directories on the Cisco NX-OS device. Identifying the Current Directory You can display the directory name of your current directory. Procedure Step 1 pwd Displays the name of your current directory. switch# pwd Changing the Current Directory You can change the current directory for file system operations. The initial default directory is bootflash:. Procedure Step 1 Step 2 pwd switch# pwd cd {directory filesystem:[//module/][directory]} (Optional) Displays the name of your current default directory. Changes to a new current directory. The file system, module, and directory names are case sensitive. switch# cd usb1: 90

105 Using the Device File Systems, Directories, and Files Creating a Directory Creating a Directory You can create directories in the bootflash: and flash device file systems. Procedure Step 1 Step 2 Step 3 pwd switch# pwd cd {directory filesystem:[//module/][directory]} switch# cd slot0: mkdir [filesystem:[//module/]]directory switch# mkdir test (Optional) Displays the name of your current default directory. (Optional) Changes to a new current directory. The file system, module, and directory names are case sensitive. Creates a new directory. The filesystem argument is case sensitive. The directory argument is alphanumeric, case sensitive, and has a maximum of 64 characters. Displaying Directory Contents You can display the contents of a directory. Procedure Step 1 dir [directory filesystem:[//module/][directory]] switch# dir bootflash:test Displays the directory contents. The default is the current working directory. The file system and directory names are case sensitive. Deleting a Directory You can remove directories from the file systems on your device. 91

106 Accessing Directories on the Standby Supervisor Module Using the Device File Systems, Directories, and Files Before You Begin Ensure that the directory is empty before you try to delete it. Procedure Step 1 Step 2 Step 3 pwd switch# pwd dir [filesystem :[//module/][directory]] switch# dir bootflash:test rmdir [filesystem :[//module/]]directory switch# rmdir test (Optional) Displays the name of your current default directory. (Optional) Displays the contents of the current directory. The file system, module, and directory names are case sensitive. If the directory is not empty, you must delete all the files before you can delete the directory. Deletes a directory. The file system and directory name are case sensitive. Accessing Directories on the Standby Supervisor Module You can access all file systems on the standby supervisor module (remote) from a session on the active supervisor module. This feature is useful when copying files to the active supervisor modules requires similar files to exist on the standby supervisor module. To access the file systems on the standby supervisor module from a session on the active supervisor module, you specify the standby supervisor module in the path to the file using either filesystem://sup-remote/ or filesystem://sup-standby/. Working with Files Moving Files This section describes how to work with files on the Cisco NX-OS device. You can move a file from one directory to another directory. Caution If a file with the same name already exists in the destination directory, that file is overwritten by the moved file. You can use the move command to rename a file by moving the file within the same directory. 92

107 Using the Device File Systems, Directories, and Files Copying Files Procedure Step 1 Step 2 Step 3 pwd switch# pwd dir [filesystem:[//module/][directory]] switch# dir bootflash (Optional) Displays the name of your current default directory. (Optional) Displays the contents of the current directory. The file system and directory name are case sensitive. move [filesystem:[//module/][directory /] Moves a file. directory/]source-filename The file system, module, and directory names are case {{filesystem:[//module/][directory /] sensitive. directory/}[target-filename] target-filename} The target-filename argument is alphanumeric, case sensitive, and has a maximum of 64 characters. If the target-filename argument is not specified, the filename switch# move test old_tests/test1 defaults to the source-filename argument value. Copying Files You can make copies of files, either within the same directory or on another directory. For more information, see the Cisco Nexus 9000 Series NX-OS Troubleshooting Guide. Note Use the dir command to ensure that enough space is available in the target file system. If enough space is not available, use the delete command to remove unneeded files. Procedure Step 1 Step 2 Step 3 pwd switch# pwd dir [filesystem:[//module/][directory]] switch# dir bootflash copy [filesystem:[//module/][directory/] directory/]source-filename (Optional) Displays the name of your current default directory. (Optional) Displays the contents of the current directory. The file system and directory name are case sensitive. Copies a file. The file system, module, and directory names are case sensitive. The source-filename argument is alphanumeric, case sensitive, and has a maximum 93

108 Deleting Files Using the Device File Systems, Directories, and Files {filesystem:[//module/][directory/] directory/}[target-filename] switch# copy test old_tests/test1 of 64 characters. If the target-filename argument is not specified, the filename defaults to the source-filename argument value. Deleting Files You can delete a file from a directory. Procedure Step 1 Step 2 dir [filesystem:[//module/][directory]] switch# dir bootflash: delete {filesystem:[//module/][directory/] directory/}filename switch# delete bootflash:old_config.cfg (Optional) Displays the contents of the current directory. The file system and directory name are case sensitive. Deletes a file. The file system, module, and directory names are case sensitive. The source-filename argument is case sensitive. Caution If you specify a directory, the delete command deletes the entire directory and all its contents. Displaying File Contents You can display the contents of a file. Procedure Step 1 show file [filesystem:[//module/]][directory/]filename Displays the file contents. switch# show file bootflash:test-results 94

109 Using the Device File Systems, Directories, and Files Displaying File Checksums Displaying File Checksums You can display checksums to check the file integrity. Procedure Step 1 show file [filesystem:[//module/]][directory/]filename {cksum md5sum} Displays the checksum or MD5 checksum of the file. switch# show file bootflash:trunks2.cfg cksum Compressing and Uncompressing Files You can compress and uncompress files on your device using Lempel-Ziv 1977 (LZ77) coding. Procedure Step 1 Step 2 dir [filesystem:[//module/]directory]] switch# dir bootflash: gzip [filesystem:[//module/][directory/] directory/]filename (Optional) Displays the contents of the current directory. The file system and directory name are case sensitive. Compresses a file. After the file is compressed, it has a.gz suffix. Step 3 switch# gzip show_tech gunzip [filesystem:[//module/][directory/] directory/]filename.gz switch# gunzip show_tech.gz Uncompresses a file. The file to uncompress must have the.gz suffix. After the file is uncompressed, it does not have the.gz suffix. Displaying the Last Lines in a File You can display the last lines of a file. 95

110 Redirecting show Command Output to a File Using the Device File Systems, Directories, and Files Procedure Step 1 tail [filesystem:[//module/]][directory/]filename [lines] switch# tail ospf-gr.conf Displays the last lines of a file. The default number of lines is 10. The range is from 0 to 80 lines. Redirecting show Command Output to a File You can redirect show command output to a file on bootflash:, volatile:, or a remote server. You can also specify the format for the command output. Procedure Step 1 terminal redirection-mode {ascii zipped} switch# terminal redirection-mode zipped (Optional) Sets the redirection mode for the show command output for the user session. The default mode is ascii. Step 2 show-command > [filesystem:[//module/][directory] [directory /]]filename Redirects the output from a show command to a file. switch# show tech-support > bootflash:techinfo Finding Files You can find the files in the current working directory and its subdirectories that have names that begin with a specific character string. Procedure Step 1 pwd switch# pwd (Optional) Displays the name of your current default directory. 96

111 Using the Device File Systems, Directories, and Files Working with Archive Files Step 2 cd {filesystem:[//module/][directory] directory} (Optional) Changes the default directory. Step 3 switch# cd bootflash:test_scripts find filename-prefix switch# find bgp_script Finds all filenames in the default directory and in its subdirectories beginning with the filename prefix. The filename prefix is case sensitive. Working with Archive Files Creating an Archive File The Cisco NX-OS software supports archive files. You can create an archive file, append files to an existing archive file, extract files from an archive file, and list the files in an archive file. You can create an archive file and add files to it. You can specify the following compression types: bzip2 gzip Uncompressed The default is gzip. Procedure Step 1 tar create {bootflash: volatile:}archive-filename [absolute] [bz2-compress] [gz-compress] [remove] [uncompressed] [verbose] filename-list switch# tar create bootflash:config-archive gz-compress bootflash:config-file Creates an archive file and adds files to it. The filename is alphanumeric, not case sensitive, and has a maximum length of 240 characters. The absolute keyword specifies that the leading backslash characters (\) should not be removed from the names of the files added to the archive file. By default, the leading backslash characters are removed. The bz2-compress, gz-compress, and uncompressed keywords determine the compression utility used when files are added, or later appended, to the archive and the decompression utility to use when extracting the files. If you do not specify an extension for the archive file, the defaults are as follows: For bz2-compress, the extension is.tar.bz2. 97

112 Appending Files to an Archive File Using the Device File Systems, Directories, and Files For gz-compress, the extension is.tar.gz. For uncompressed, the extension is.tar. The remove keyword specifies that the Cisco NX-OS software should delete the files from the file system after adding them to the archive. By default, the files are not deleted. The verbose keyword specifies that the Cisco NX-OS software should list the files as they are added to the archive. By default, the files are listed as they are added. Appending Files to an Archive File You can append files to an existing archive file on your device. Before You Begin You have created an archive file on your device. Procedure Step 1 tar append {bootflash: volatile:}archive-filename [absolute] [remove] [verbose] filename-list Adds files to an existing archive file. The archive filename is not case sensitive. The absolute keyword specifies that the leading backslash characters (\) should not be removed from the names of the files added to the archive file. By default, the leading backslash characters are removed. The remove keyword specifies that the Cisco NX-OS software should delete the files from the filesystem after adding them to the archive. By default, the files are not deleted. The verbose keyword specifies that the Cisco NX-OS software should list the files as they are added to the archive. By default, the files are listed as they are added. This example shows how to append a file to an existing archive file: switch# tar append bootflash:config-archive.tar.gz bootflash:new-config Extracting Files from an Archive File You can extract files to an existing archive file on your device. 98

113 Using the Device File Systems, Directories, and Files Displaying the Filenames in an Archive File Before You Begin You have created an archive file on your device. Procedure Step 1 tar extract {bootflash: Extracts files from an existing archive file. The archive filename volatile:}archive-filename is not case sensitive. [keep-old] [screen] [to {bootflash: The keep-old keyword indicates that the Cisco NX-OS software volatile:}[/directory-name]] should not overwrite files with the same name as the files being [verbose] extracted. switch# tar extract bootflash:config-archive.tar.gz The screen keyword indicates that the Cisco NX-OS software should not overwrite files with the same name as the files being extracted. The to keyword specifies the target filesystem. You can include a directory name. The directory name is alphanumeric, case sensitive, and has a maximum length of 240 characters. The verbose keyword specifies that the Cisco NX-OS software should display the names of the files as they are extracted. Displaying the Filenames in an Archive File You can display the names of the files in an archive files using the tar list command. tar list {bootflash: volatile:}archive-filename The archive filename is not case sensitive. switch# tar list bootflash:config-archive.tar.gz config-file new-config Examples of Using the File System This section includes examples of how to use the file system on the Cisco NX-OS device. Accessing Directories on Standby Supervisor Modules This example shows how to list the files on the standby supervisor module: switch# dir bootflash://sup-remote 4096 Oct 03 23:55: patch/ Jan 01 13:23: lost+found/ 99

114 Moving Files Using the Device File Systems, Directories, and Files Oct 21 18:55: n9000-dk i1.1.bin... Usage for bootflash://sup-remote bytes used bytes free bytes total This example shows how to delete a file on the standby supervisor module: switch# delete bootflash://sup-remote/aoldconfig.txt Moving Files This example shows how to move a file on an external flash device: switch# move usb1:samplefile usb1:mystorage/samplefile This example shows how to move a file in the default file system: switch# move samplefile mystorage/samplefile Copying Files This example shows how to copy the file called samplefile from the root directory of the usb1: file system to the mystorage directory: switch# copy usb1:samplefile usb1:mystorage/samplefile This example shows how to copy a file from the current directory level: switch# copy samplefile mystorage/samplefile This example shows how to copy a file from the active supervisor module bootflash to the standby supervisor module bootflash: switch# copy bootflash:nx-os-image bootflash://sup-2/nx-os-image This example shows how to overwrite the contents of an existing configuration in NVRAM: switch# copy nvram:snapshot-config nvram:startup-config Warning: this command is going to overwrite your current startup-config: Do you wish to continue? {y/n} [y] y You can also use the copy command to upload and download files from the bootflash: file system to or from a FTP, TFTP, SFTP, or SCP server. Deleting a Directory You can remove directories from the file systems on your device. Before You Begin Ensure that the directory is empty before you try to delete it. 100

115 Using the Device File Systems, Directories, and Files Displaying File Contents Procedure Step 1 Step 2 Step 3 pwd switch# pwd dir [filesystem :[//module/][directory]] switch# dir bootflash:test rmdir [filesystem :[//module/]]directory switch# rmdir test (Optional) Displays the name of your current default directory. (Optional) Displays the contents of the current directory. The file system, module, and directory names are case sensitive. If the directory is not empty, you must delete all the files before you can delete the directory. Deletes a directory. The file system and directory name are case sensitive. Displaying File Contents This example shows how to display the contents of a file on an external flash device: switch# show file usb1:test configure terminal interface ethernet 1/1 no shutdown end show interface ethernet 1/1 This example shows how to display the contents of a file that resides in the current directory: switch# show file myfile Displaying File Checksums This example shows how to display the checksum of a file: switch# show file bootflash:trunks2.cfg cksum This example shows how to display the MD5 checksum of a file: switch# show file bootflash:trunks2.cfg md5sum 3b aabefcf46459de10c9281c 101

116 Compressing and Uncompressing Files Using the Device File Systems, Directories, and Files Compressing and Uncompressing Files This example shows how to compress a file: switch# dir Jul 04 00:51: Samplefile... switch# gzip volatile:samplefile switch# dir Jul 04 00:51: Samplefile.gz... This example shows how to uncompress a compressed file: switch# dir Jul 04 00:51: Samplefile.gz... switch# gunzip samplefile switch# dir Jul 04 00:51: Samplefile... Redirecting show Command Output This example shows how to direct the output to a file on the bootflash: file system: switch# show interface > bootflash:switch1-intf.cfg This example shows how to direct the output to a file on external flash memory: switch# show interface > usb1:switch-intf.cfg This example shows how to direct the output to a file on a TFTP server: switch# show interface > tftp:// /home/configs/switch-intf.cfg Preparing to copy...done This example shows how to direct the output of the show tech-support command to a file: switch# show tech-support > Samplefile Building Configuration... switch# dir Jul 04 00:51: Samplefile Usage for volatile:// bytes used bytes free bytes total Finding Files This example shows how to find a file in the current default directory: switch# find smm_shm.cfg /usr/bin/find:./lost+found: Permission denied./smm_shm.cfg 102

117 Using the Device File Systems, Directories, and Files Additional References for File Systems./newer-fs/isan/etc/routing-sw/smm_shm.cfg./newer-fs/isan/etc/smm_shm.cfg Additional References for File Systems This section includes additional information related to the file systems. Related Documents for File Systems Related Topic Licensing Document Title Cisco NX-OS Licensing Guide 103

118 Related Documents for File Systems Using the Device File Systems, Directories, and Files 104

119 CHAPTER 9 Working with Configuration Files This chapter contains the following sections: About Configuration Files, page 105 Licensing Requirements for Configuration Files, page 106 Managing Configuration Files, page 106 Verifying the Device Configuration, page 116 Examples of Working with Configuration Files, page 116 Additional References for Configuration Files, page 117 About Configuration Files Configuration files contain the Cisco NX-OS software commands used to configure the features on a Cisco NX-OS device. Commands are parsed (translated and executed) by the Cisco NX-OS software when the system is booted (from the startup-config file) or when you enter commands at the CLI in a configuration mode. To change the startup configuration file, you can either save the running-configuration file to the startup configuration using the copy running-config startup-config command or copy a configuration file from a file server to the startup configuration. Types of Configuration Files The Cisco NX-OS software has two types of configuration files, running configuration and startup configuration. The device uses the startup configuration (startup-config) during device startup to configure the software features. The running configuration (running-config) contains the current changes that you make to the startup-configuration file. The two configuration files can be different. You might want to change the device configuration for a short time period rather than permanently. In this case, you would change the running configuration by using commands in global configuration mode but not save the changes to the startup configuration. To change the running configuration, use the configure terminal command to enter global configuration mode. As you use the Cisco NX-OS configuration modes, commands generally are executed immediately 105

120 Licensing Requirements for Configuration Files Working with Configuration Files and are saved to the running configuration file either immediately after you enter them or when you exit a configuration mode. To change the startup-configuration file, you can either save the running configuration file to the startup configuration or download a configuration file from a file server to the startup configuration. Related Topics Saving the Running Configuration to the Startup Configuration, on page 106 Downloading the Startup Configuration From a Remote Server, on page 108 Licensing Requirements for Configuration Files The following table shows the licensing requirements for this feature: Product Cisco NX-OS License Requirement Configuration files require no license. Any feature not included in a license package is bundled with the nx-os image and is provided at no extra charge to you. For a complete explanation of the Cisco NX-OS licensing scheme, see the Cisco NX-OS Licensing Guide. Managing Configuration Files This section describes how to manage configuration files. Saving the Running Configuration to the Startup Configuration You can save the running configuration to the startup configuration to save your changes for the next time you that reload the device. Procedure Step 1 Step 2 show running-config switch# show running-config copy running-config startup-config switch# copy running-config startup-config (Optional) Displays the running configuration. Copies the running configuration to the startup configuration. 106

121 Working with Configuration Files Copying a Configuration File to a Remote Server Copying a Configuration File to a Remote Server You can copy a configuration file stored in the internal memory to a remote server as a backup or to use for configuring other Cisco NX-OS devices. Procedure Step 1 copy running-config scheme://server/[url /]filename switch# copy running-config tftp:// /sw1-run-config.bak Copies the running-configuration file to a remote server. For the scheme argument, you can enter tftp:, ftp:, scp:, or sftp:. The server argument is the address or name of the remote server, and the url argument is the path to the source file on the remote server. The server, url, and filename arguments are case sensitive. Step 2 copy startup-config scheme://server/[url /]filename switch# copy startup-config tftp:// /sw1-start-config.bak Copies the startup-configuration file to a remote server. For the scheme argument, you can enter tftp:, ftp:, scp:, or sftp:. The server argument is the address or name of the remote server, and the url argument is the path to the source file on the remote server. The server, url, and filename arguments are case sensitive. This example shows how to copy the configuration file to a remote server: switch# copy running-config tftp:// /sw1-run-config.bak switch# copy startup-config tftp:// /sw1-start-config.bak Downloading the Running Configuration From a Remote Server You can configure your Cisco NX-OS device by using configuration files that you created on another Cisco NX-OS device and uploaded to a remote server. You then download the file from the remote server to your device using TFTP, FTP, Secure Copy (SCP), or Secure Shell FTP (SFTP) to the running configuration. Before You Begin Ensure that the configuration file that you want to download is in the correct directory on the remote server. Ensure that the permissions on the file are set correctly. Permissions on the file should be set to world-read. Ensure that your device has a route to the remote server. Your device and the remote server must be in the same subnetwork if you do not have a router or a default gateway to route traffic between subnets. Check connectivity to the remote server using the ping or ping6 command. 107

122 Downloading the Startup Configuration From a Remote Server Working with Configuration Files Procedure Step 1 Step 2 Step 3 Step 4 copy scheme://server/[url/]filename running-config switch# copy tftp:// /my-config running-config show running-config switch# show running-config copy running-config startup-config switch# copy running-config startup-config show startup-config switch# show startup-config Downloads the running-configuration file from a remote server. For the scheme argument, you can enter tftp:, ftp:, scp:, or sftp:. The server argument is the address or name of the remote server, and the url argument is the path to the source file on the remote server. The server, url, and filename arguments are case sensitive. (Optional) Displays the running configuration. (Optional) Copies the running configuration to the startup configuration. (Optional) Displays the startup configuration. Related Topics Copying Files, on page 100 Downloading the Startup Configuration From a Remote Server You can configure your Cisco NX-OS device by using configuration files that you created on another Cisco NX-OS device and uploaded to a remote server. You then download the file from the remote server to your device using TFTP, FTP, Secure Copy (SCP), or Secure Shell FTP (SFTP) to the startup configuration. Caution This procedure disrupts all traffic on the Cisco NX-OS device. Before You Begin Log in to a session on the console port. Ensure that the configuration file that you want to download is in the correct directory on the remote server. Ensure that the permissions on the file are set correctly. Permissions on the file should be set to world-read. 108